PT-2021-5088
CVE-2021-38020
·
تاريخ النشر
2021-11-15
·
تاريخ التحديث
2024-06-15
الوصف من
CVSS 2.0
6.4
متوسطةالمقاييسAV:N/AC:L/Au:N/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 96.0.4664.45
Description
The issue concerns insufficient policy enforcement in the contacts picker component of Google Chrome on Android. This allows a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page, potentially bypassing security restrictions and gaining unauthorized access to protected information.
Recommendations
For versions prior to 96.0.4664.45, update to version 96.0.4664.45 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾