Threats tagged 'ghsa-28qg-3gvj-3hwf'

1 threat

Threats tagged 'ghsa-28qg-3gvj-3hwf'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.3	EPSS 0.3%	CVE-2026-95340Chrome · Incorrect authorization Medium4.3EPSS 0.3%2026-09-29CVE Database V5CVE-2026-95340 CVE-2026-95340 is a vulnerability in Google Chrome's PictureInPicture feature prior to version 154.0.8037.57. It involves incorrect authorization that allows a remote attacker, using social engineering, to bypass the web origin policy via a crafted HTML page. The vulnerability has a medium severity rating with a CVSS score of 4.3. EPSS 0.3%Vulnerability Google #ghsa-28qg-3gvj-3hwf	CVE Database V5	2026-09-29

Showing 1–1 of 1 result