tocsin

Debian/chromium: medium 4.3

Confused deputy in DeviceBoundSessionCredentials in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low

Action: Upgrade chromium to 155.0.8059.39-1~deb12u1 or later.

Affected

introducedfixedlast affected
0155.0.8059.39-1~deb12u1-

Fixed versions

155.0.8059.39-1~deb12u1

Sources

published · modified · JSON