Description

Insufficient policy enforcement in networking in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to potentially bypass firewall controls via a crafted HTML page.

Remediation

References

https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop_17.html

https://crbug.com/1145680

Related Vulnerabilities

CVE-2023-4759 Vulnerability in maven package org.eclipse.jgit:org.eclipse.jgit

CVE-2020-13942 Vulnerability in maven package org.apache.unomi:unomi-services

CVE-2010-2076 Vulnerability in maven package org.apache.cxf:cxf-bundle

CVE-2022-34271 Vulnerability in maven package org.apache.atlas:atlas-intg

CVE-2021-45456 Vulnerability in maven package org.apache.kylin:kylin-server-base

Severity

Critical

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Tags

Release Notes Vendor Advisory Exploit Issue Tracking NVD-CWE-noinfo