Threats tagged 'ghsa-vg7r-fpqr-4xpq'

An origin validation error in the Paint feature of Google Chrome versions prior to 153.0.8010.36 allows a remote attacker to obtain cross-origin data by crafting a malicious HTML page. This vulnerability is classified with medium severity by Chromium security. No CVSS score or detailed vendor advisory is currently available, and no exploits are known in the wild.