CVE-2019-25154

2024-07-1622:30:25

Chrome

github.com

google chrome

iframe

vulnerability

sandbox escape

html page

AI Score

6.3

Confidence

High

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

Inappropriate implementation in iframe in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

CNA Affected

[
  {
    "vendor": "Google",
    "product": "Chrome",
    "versions": [
      {
        "status": "affected",
        "version": "77.0.3865.75",
        "lessThan": "77.0.3865.75",
        "versionType": "custom"
      }
    ]
  }
]