Incorrect authorization in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origi...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

Incorrect authorization in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. (Chromium security severity: High)

出典: OSV.dev (Open Source Vulnerabilities) OSV

影響パッケージ

Debian:12 chromium

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.0.8010.52-1~deb12u1"}]}]

Debian:13 chromium

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.0.8010.47-2~deb13u1"}]}]

Debian:14 chromium

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.0.8010.47-1"}]}]

参照URL

advisory security-tracker.debian.org