GHSA-535v-mq2p-6m4m

Опубликовано: 01 июл. 2026

Источник: github

Github: Не прошло ревью

CVSS3: 4.3

Описание

Inappropriate implementation in Paint in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

Ссылки

EPSS

Процентиль: 14%

0.0023

Низкий

4.3 Medium

CVSS3

CVE ID

CVE-2026-13972

Дефекты

CWE-451

Связанные уязвимости

CVE-2026-13972

CVSS3: 4.3

ubuntu

около 1 месяца назад

Inappropriate implementation in Paint in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13972

CVSS3: 5.4

redhat

около 1 месяца назад

Inappropriate implementation in Paint in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13972

CVSS3: 4.3

nvd

около 1 месяца назад

Inappropriate implementation in Paint in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13972

msrc

около 1 месяца назад

Chromium: CVE-2026-13972 Inappropriate implementation in Paint

CVE-2026-13972

CVSS3: 4.3

debian

около 1 месяца назад

Inappropriate implementation in Paint in Google Chrome prior to 150.0. ...

EPSS

Процентиль: 14%

0.0023

Низкий

4.3 Medium

CVSS3

CVE ID

CVE-2026-13972

Дефекты

CWE-451