Search: 20.chromium

A UI misrepresentation vulnerability exists in Google Chrome versions prior to 153.0.8010.36. This flaw allows a remote attacker to use social engineering techniques to spoof UI elements by crafting malicious HTML pages. The vulnerability is classified with medium severity by Chromium security. No CVSS score or exploit in the wild is currently reported.

Missing authorization in LocalNetworkAccess in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)

A vulnerability in Google Chrome on Mac prior to version 153.0.8010.36 involves incorrect reference resolution in the Accessibility component. This flaw could allow a remote attacker to potentially spoof user interface elements by crafting a malicious HTML page. The issue is categorized with medium severity by Chromium security. No known exploits are reported in the wild, and no official patch information is provided in the available data.

An information leak vulnerability exists in Google Chrome on iOS versions prior to 153.0.8010.36. This flaw allows a remote attacker to leverage social engineering techniques to cause sensitive information to be leaked via a crafted HTML page. The issue is classified with low severity by Chromium security. No CVSS score or exploit in the wild is currently known.

Missing authorization in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)

Incorrect authorization in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass site isolation via a crafted file. (Chromium security severity: Medium)

Missing authorization in Views in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: High)

A vulnerability in Google Chrome prior to version 153.0.8010.36 involves improper encoding or escaping of output in CSS. This flaw could allow a remote attacker to potentially bypass the web origin policy by using a crafted HTML page. The issue is classified with medium severity by Chromium security. No known exploits are reported in the wild, and no patch links are provided in the available data.

Information leak in Navigation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)

An improper input validation vulnerability exists in Chromium used by Google Chrome versions prior to 153.0.8010.36. This flaw allows a remote attacker who has already compromised the renderer process to spoof user interface elements by sending crafted network traffic. The vulnerability is classified with low severity by Chromium security. No CVSS score or known exploits in the wild have been reported. No explicit patch information is provided in the source data.

Incorrect authorization in Web Authentication in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted Chrome extension. (Chromium security severity: Low)

An uninitialized resource vulnerability in the GPU component of Google Chrome on Android versions prior to 153.0.8010.36 allows a remote attacker to read memory outside the sandbox by delivering a crafted HTML page. The vulnerability is rated medium severity by Chromium security. There are no known exploits in the wild and no patch information is provided in the available data.

An origin validation error in the Paint feature of Google Chrome versions prior to 153.0.8010.36 allows a remote attacker to obtain cross-origin data by crafting a malicious HTML page. This vulnerability is classified with medium severity by Chromium security. No CVSS score or detailed vendor advisory is currently available, and no exploits are known in the wild.

A type confusion vulnerability in the V8 JavaScript engine of Google Chrome versions prior to 153.0.8010.36 allows a remote attacker to read memory inside the sandbox by delivering a crafted HTML page. This vulnerability is rated high severity by the Chromium security team. No CVSS score or patch information is currently available.

Incorrect authorization in Isolated in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)

Observable discrepancy in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

Out of bounds read in Chromoting in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to read memory outside the sandbox via a local program. (Chromium security severity: High)

Missing authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via crafted network traffic. (Chromium security severity: Medium)

An information leak vulnerability exists in the Cross-Origin Resource Sharing (CORS) implementation in Google Chrome versions prior to 153.0.8010.36. This flaw allows a remote attacker who has already compromised the renderer process to obtain cross-origin data by using a crafted HTML page. The vulnerability is rated with medium severity by Chromium security. No specific affected versions or patch information is provided in the input data.

Incorrect authorization in FileAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)