PT-2021-2128
CVE-2021-21117
·
تاريخ النشر
2021-01-20
·
تاريخ التحديث
2024-06-15
الوصف من
CVSS 3.1
7.8
عاليةالمقاييسAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 88.0.4324.96
Description
The issue is related to insufficient policy enforcement in the Cryptohome component of Google Chrome, which can allow a local attacker to perform OS-level privilege escalation via a crafted file. This is due to insecure privilege management.
Recommendations
For versions prior to 88.0.4324.96, update to version 88.0.4324.96 or later to resolve the issue. As a temporary workaround, consider restricting access to the Cryptohome component until a patch is applied.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾