Inappropriate implementation in Push messaging in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_name": "chromium-browser", "binary_version": "99.0.4844.51-0ubuntu0.18.04.1" }, { "binary_name": "chromium-browser-dbgsym", "binary_version": "99.0.4844.51-0ubuntu0.18.04.1" }, { "binary_name": "chromium-browser-l10n", "binary_version": "99.0.4844.51-0ubuntu0.18.04.1" }, { "binary_name": "chromium-chromedriver", "binary_version": "99.0.4844.51-0ubuntu0.18.04.1" }, { "binary_name": "chromium-chromedriver-dbgsym", "binary_version": "99.0.4844.51-0ubuntu0.18.04.1" }, { "binary_name": "chromium-codecs-ffmpeg", "binary_version": "99.0.4844.51-0ubuntu0.18.04.1" }, { "binary_name": "chromium-codecs-ffmpeg-dbgsym", "binary_version": "99.0.4844.51-0ubuntu0.18.04.1" }, { "binary_name": "chromium-codecs-ffmpeg-extra", "binary_version": "99.0.4844.51-0ubuntu0.18.04.1" }, { "binary_name": "chromium-codecs-ffmpeg-extra-dbgsym", "binary_version": "99.0.4844.51-0ubuntu0.18.04.1" } ] }