Threats tagged 'ghsa-rhr4-9ph6-j495'

A vulnerability in Google Chrome prior to version 148.0.7778.96 involves insufficient validation of untrusted input in the SSL component. This flaw allows a remote attacker who has compromised the renderer process to perform UI spoofing via a crafted HTML page. The vulnerability is rated as low severity by Chromium security and has a CVSS score of 4.2 (medium severity).