Threats tagged 'ghsa-9557-2mpw-2vh8'

A missing authorization vulnerability in the Contacts feature of Google Chrome prior to version 153.0.8010.36 could allow a remote attacker, who has compromised the renderer process and used social engineering, to potentially access sensitive information via a crafted HTML page. The vulnerability has a medium severity rating with a CVSS score of 5.3.