Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-w6w7-jcjp-vp4q

Опубликовано: 07 авг. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

Inappropriate implementation in Picture In Picture in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

Inappropriate implementation in Picture In Picture in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

EPSS

Процентиль: 14%
0.00048
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 4.3
ubuntu
21 день назад

Inappropriate implementation in Picture In Picture in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

CVSS3: 4.3
nvd
21 день назад

Inappropriate implementation in Picture In Picture in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

msrc
20 дней назад

Chromium: CVE-2025-8577 Inappropriate implementation in Picture In Picture

CVSS3: 4.3
debian
21 день назад

Inappropriate implementation in Picture In Picture in Google Chrome pr ...

CVSS3: 8.1
fstec
9 месяцев назад

Уязвимость браузера Google Chrome, связанная с ошибками реализации проверки безопасности для стандартных элементов, позволяющая нарушителю получить доступ к конфиденциальной информации

EPSS

Процентиль: 14%
0.00048
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-79