Google Chrome
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*, +1 more
- < 149.0.7827.103
A vulnerability in Google Chrome Extensions prior to 149.0.7827.103 allowed remote attackers to bypass site isolation. This was achieved by exploiting an inappropriate implementation in the Extensions component, where a compromised renderer process could be manipulated through a crafted HTML page.
Exploitation of this vulnerability could lead to a site isolation bypass, allowing potentially malicious content to interact with other sites in ways that are normally restricted.
Users can update to Google Chrome version 149.0.7827.103 or later to address this vulnerability.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.