Описание
A flaw was found in DigitalCredentials within Chromium. A remote attacker could exploit a use-after-free vulnerability by leveraging social engineering to entice a user to visit a specially crafted HTML page. Successful exploitation would allow the attacker to execute arbitrary code outside of the browser's security sandbox.
Ссылки на источники
Дополнительная информация
Статус:
EPSS
9.6 Critical
CVSS3
Связанные уязвимости
Use after free in DigitalCredentials in Google Chrome prior to 153.0.8010.47 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Use after free in DigitalCredentials in Google Chrome prior to 153.0.8010.47 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Use after free in DigitalCredentials in Google Chrome prior to 153.0.8 ...
Use after free in DigitalCredentials in Google Chrome prior to 153.0.8010.47 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
EPSS
9.6 Critical
CVSS3