Описание
Inappropriate implementation in Service Worker API in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | released | 99.0.4844.51-0ubuntu0.18.04.1 |
| devel | not-affected | code not present |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/focal | DNE | focal was not-affected [code not present] |
| focal | not-affected | code not present |
| impish | not-affected | code not present |
| jammy | not-affected | code not present |
| trusty | ignored | end of standard support |
| trusty/esm | DNE | |
| upstream | released | 97.0.4692.99 |
Показывать по
Ссылки на источники
EPSS
4.3 Medium
CVSS2
6.5 Medium
CVSS3
Связанные уязвимости
Inappropriate implementation in Service Worker API in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.
Chromium: CVE-2022-0305 Inappropriate implementation in Service Worker API
Inappropriate implementation in Service Worker API in Google Chrome pr ...
Inappropriate implementation in Service Worker API in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.
Уязвимость скрипта Service Worker API браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю выполнить произвольный код
EPSS
4.3 Medium
CVSS2
6.5 Medium
CVSS3