GHSA-593v-v2rv-gqr7

Опубликовано: 12 мар. 2026

Источник: github

Github: Не прошло ревью

CVSS3: 4.3

Описание

Incorrect security UI in PictureInPicture in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

Ссылки

EPSS

Процентиль: 8%

0.00028

Низкий

4.3 Medium

CVSS3

CVE ID

CVE-2026-3942

Дефекты

CWE-451

Связанные уязвимости

CVE-2026-3942

CVSS3: 4.3

redhat

16 дней назад

An incorrect security ui flaw was found in the PictureInPicture component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=475238879

CVE-2026-3942

CVSS3: 4.3

nvd

14 дней назад

Incorrect security UI in PictureInPicture in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)