Threats tagged 'ghsa-fqrm-q7vr-pmgj'

An incorrect authorization vulnerability exists in the PushAPI component of Google Chrome versions prior to 153.0.8010.36. This flaw allows a remote attacker who has already compromised the renderer process to bypass the web origin policy by using a crafted HTML page. The vulnerability is classified with medium severity by Chromium security. No patch information is provided in the available data.