Threats tagged 'ghsa-7mj6-6r2r-q498'

A confused deputy vulnerability exists in the fullscreen feature of Google Chrome versions prior to 153.0.8010.36. This flaw allows a remote attacker who has compromised the renderer process to use social engineering to spoof UI elements via a crafted HTML page. The Chromium project has assigned this issue a low security severity rating.