PT-2021-3671 · Google+4 · Google Chrome+4
CVSS v3.1
7.8
عالية
| المتجه | AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 92.0.4515.107
Description
The issue is related to insufficient policy enforcement in the Installer component of Google Chrome, which can be exploited by a remote attacker to perform local privilege escalation via a crafted file. This can allow the attacker to bypass security restrictions and gain unauthorized access to protected information.
Recommendations
For versions prior to 92.0.4515.107, update to version 92.0.4515.107 or later to resolve the issue. As a temporary workaround, consider restricting access to the Installer component until a patch is applied.
استغلال
إصلاح
DoS
LPE
Incorrect Permission
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾
المعرّفات ذات الصلة
المنتجات المتأثرة
Alt Linux
Astra Linux
Google Chrome
Suse
Ubuntu