Confirmed users
634
edits
Security Severity Ratings/Client: Difference between revisions
Jump to navigation
Jump to search
fix two spelling errors
(Added secops-cred-leak) |
Amccreight (talk | contribs) (fix two spelling errors) |
||
| Line 5: | Line 5: | ||
==Severity Ratings == | ==Severity Ratings == | ||
Severity ratings are used to indicate how severe we | Severity ratings are used to indicate how severe we believe a bug is, and help provide guidance for its urgency and priority. Generally, we ask that they only be assigned by those with experience evaluating vulnerabilities in coordination with the security team. Presently we meet weekly to triage unclassified bugs. | ||
{| class="wikitable collapsible" style="width: 100%" | {| class="wikitable collapsible" style="width: 100%" | ||
| Line 47: | Line 47: | ||
| | | | ||
* Disclosure of OS username | * Disclosure of OS username | ||
* Disclosure of browsing history through | * Disclosure of browsing history through efficient and fast timing side channels | ||
* Detection of arbitrary local files | * Detection of arbitrary local files | ||
* Launching of arbitrary local application without arguments | * Launching of arbitrary local application without arguments | ||