Threats tagged 'ghsa-vmgv-23fp-pw3j'

A missing authorization vulnerability in the WebUI of Google Chrome versions prior to 153.0.8010.36 allows a remote attacker who has already compromised the renderer process to bypass the web origin policy using a crafted HTML page. This vulnerability is classified with high severity by Chromium security. There is no CVSS score or patch information provided in the available data. No known exploits are reported in the wild.