Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-g7r4-2rj5-x8v8

Опубликовано: 07 авг. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

Inappropriate implementation in Picture In Picture in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

Inappropriate implementation in Picture In Picture in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

EPSS

Процентиль: 18%
0.00057
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 4.3
ubuntu
2 месяца назад

Inappropriate implementation in Picture In Picture in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

CVSS3: 4.3
nvd
2 месяца назад

Inappropriate implementation in Picture In Picture in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

msrc
2 месяца назад

Chromium: CVE-2025-8579 Inappropriate implementation in Gemini Live in Chrome

CVSS3: 4.3
debian
2 месяца назад

Inappropriate implementation in Picture In Picture in Google Chrome pr ...

CVSS3: 4.3
fstec
7 месяцев назад

Уязвимость браузера Google Chrome, связанная с ошибками реализации проверки безопасности для стандартных элементов, позволяющая нарушителю получить доступ к конфиденциальной информации

EPSS

Процентиль: 18%
0.00057
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-79