CVE-2022-3656

Imperva Red Team 最近披露了一个名为 CVE-2022-3656 的漏洞，该漏洞影响超过 25 亿使用 Google Chrome 和基于 Chromium 的浏览器的用户。 该漏洞允许窃取敏感文件，例如加密钱包和云服务商凭据。 漏洞说明： 1.https://bugs.chromium.org/p/chromium/issues/detail?id=1345275c34 2.https://www.imperva.com/blog/google-chrome-symstealer-vulnerability/ 使用方法： 1. 下载 poc.zip 文件并解压 2. 进...

Experts Detail Chromium Browser Security Flaw Putting Confidential Data at Risk

Details have emerged about a now-patched vulnerability in Google Chrome and Chromium-based browsers that, if successfully exploited, could have made it possible to siphon files containing confidential data. "The issue arose from the way the browser interacted with symlinks when processing files a...