China National Vulnerability DatabaseCNVD-2023-12027Google Chrome security special issue vulnerability
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Google Chrome, a web browser from Google, Inc. prior to Google Chrome 91.0.4472.77, is vulnerable to a security-patterned issue that results from insufficient enforcement of content security policies. An attacker could use this vulnerability to bypass content security policies via specially crafted HTML pages.
| CPE | Name | Operator | Version |
|---|---|---|---|
| google chrome <91. | eq | 0.4472.77 |
Related
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H