Описание
Use after free in Downloads in Google Chrome on Windows prior to 88.0.4324.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | released | 89.0.4389.82-0ubuntu0.18.04.1 |
| devel | not-affected | code not present |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/focal | DNE | focal was not-affected [code not present] |
| focal | not-affected | code not present |
| groovy | not-affected | code not present |
| precise/esm | DNE | |
| trusty | ignored | end of standard support |
| trusty/esm | DNE | |
| upstream | released | 88.0.4324.182 |
Показывать по
Ссылки на источники
6.8 Medium
CVSS2
9.6 Critical
CVSS3
Связанные уязвимости
Use after free in Downloads in Google Chrome on Windows prior to 88.0.4324.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
Use after free in Downloads in Google Chrome on Windows prior to 88.0. ...
Use after free in Downloads in Google Chrome on Windows prior to 88.0.4324.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
Уязвимость функции Downloads веб-браузера Google Chrome, позволяющая нарушителю выполнить произвольный код
6.8 Medium
CVSS2
9.6 Critical
CVSS3