Search: 20.chromium

UI misrepresentation in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)

Missing authorization in ControlledFrame in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)

A missing authorization vulnerability in the DevTools component of Google Chrome versions prior to 153.0.8010.36 allows a remote attacker to obtain cross-origin data via a crafted Chrome extension. The vulnerability is classified as low severity by Chromium security, with no known exploits in the wild and no CVSS score assigned. The vendor advisory status and patch availability are not confirmed.

A confused deputy vulnerability exists in the fullscreen feature of Google Chrome versions prior to 153.0.8010.36. This flaw allows a remote attacker who has compromised the renderer process to use social engineering to spoof UI elements via a crafted HTML page. The Chromium project has assigned this issue a low security severity rating.

An information leak vulnerability exists in the WebMCP component of Google Chrome versions prior to 153.0.8010.36. This flaw allows a remote attacker who has already compromised the renderer process to obtain cross-origin data by using a crafted HTML page. The vulnerability is classified with medium severity by Chromium security.

An observable discrepancy in navigation behavior in Google Chrome versions prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data by using a crafted HTML page. This vulnerability is classified with medium severity by Chromium security. No CVSS score or detailed exploit information is available. There is no explicit patch information provided in the source data.

An incorrect authorization vulnerability in the Loader component of Google Chrome prior to version 153.0.8010.36 allows a remote attacker to bypass the web origin policy using a crafted HTML page. This vulnerability is classified with medium severity by Chromium security. No patch information is currently provided, and no known exploits are reported in the wild.

A race condition vulnerability exists in Google Chrome Mobile on iOS versions prior to 153.0.8010.36. This flaw allows a remote attacker, using social engineering and a crafted HTML page, to bypass the web origin policy. The vulnerability is classified as high severity by Chromium security. No CVSS score or patch information is currently provided.

Incorrect authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted PDF file. (Chromium security severity: Medium)

Inappropriate implementation in Downloads in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)

UI misrepresentation in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)

Incorrect authorization in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)

Missing authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially bypass system access restrictions via crafted network traffic. (Chromium security severity: Low)

A vulnerability in Google Chrome prior to version 153.0.8010.36 involves incorrect authorization in the Cross-Origin Resource Sharing (CORS) mechanism. This flaw allows a remote attacker who has already compromised the renderer process to bypass the web origin policy using a crafted HTML page. The issue is classified with medium severity by Chromium security.

Incorrect authorization in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: High)

A missing authorization vulnerability in the WebUI of Google Chrome versions prior to 153.0.8010.36 allows a remote attacker who has already compromised the renderer process to bypass the web origin policy using a crafted HTML page. This vulnerability is classified with high severity by Chromium security. There is no CVSS score or patch information provided in the available data. No known exploits are reported in the wild.

Incorrect authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. (Chromium security severity: Low)

Race condition in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)

Information leak in Frames in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Low)

Improper certificate validation in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. (Chromium security severity: Low)