Lucene search
HistoryDec 20, 2023 - 4:15 p.m.
CVE-2023-3742
insufficient policy enforcement
adb
google chrome
chromeos
device policy restrictions
physical access
high severity
6.8 Medium
CVSS3
Attack Vector
PHYSICAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
21.9%
Insufficient policy enforcement in ADB in Google Chrome on ChromeOS prior to 114.0.5735.90 allowed a local attacker to bypass device policy restrictions via physical access to the device. (Chromium security severity: High)
Affected configurations
Node
googlechromeRange<114.0.5735.90
googlechrome_osMatch-
Related
prion
prion
Design/Logic Flaw
2023-12-20 16:15:00
cvelist
cvelist
CVE-2023-3742
2023-12-20 15:30:14
cve
cve
CVE-2023-3742
2023-12-20 16:15:09
6.8 Medium
CVSS3
Attack Vector
PHYSICAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
21.9%
Related for NVD:CVE-2023-3742