Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Incorrect enforcement of CSP for <object> tags in Blink in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to bypass content security policy via a crafted HTML page.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Google Chrome Blink 安全漏洞
Vulnerability Description
Google Chrome是美国谷歌（Google）公司开发的一款Web浏览器。Blink是美国谷歌（Google）公司和挪威欧朋（Opera Software）公司共同开发的一套浏览器排版引擎（渲染引擎）。 Google Chrome 66.0.3359.117之前版本中的Blink存在安全漏洞，该漏洞源于程序没有对<object>标签执行正确的内容安全策略。远程攻击者可借助特制的HTML页面利用该漏洞绕过内容安全策略。
CVSS Information
N/A
Vulnerability Type
N/A