Information disclosure

2021-09-0821:15:00

PRIOn knowledge base

www.prio-n.com

7.6 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.6%

JSON

Inappropriate implementation in the ChromeOS Readiness Tool installer on Windows prior to 1.0.2.0 loosens DCOM access rights on two objects allowing an attacker to potentially bypass discretionary access controls.

CPENameOperatorVersion
chrome_os_readiness_toollt1.0.2.0

CPE	Name	Operator	Version
	chrome_os_readiness_tool	lt	1.0.2.0

References

bit.ly/37CS6G9

crbug.com/1240952