Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-w6w7-jcjp-vp4q

Опубликовано: 07 авг. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

Inappropriate implementation in Picture In Picture in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

Inappropriate implementation in Picture In Picture in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

EPSS

Процентиль: 15%
0.00051
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 4.3
ubuntu
2 месяца назад

Inappropriate implementation in Picture In Picture in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

CVSS3: 4.3
nvd
2 месяца назад

Inappropriate implementation in Picture In Picture in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

msrc
2 месяца назад

Chromium: CVE-2025-8577 Inappropriate implementation in Picture In Picture

CVSS3: 4.3
debian
2 месяца назад

Inappropriate implementation in Picture In Picture in Google Chrome pr ...

CVSS3: 8.1
fstec
10 месяцев назад

Уязвимость браузера Google Chrome, связанная с ошибками реализации проверки безопасности для стандартных элементов, позволяющая нарушителю получить доступ к конфиденциальной информации

EPSS

Процентиль: 15%
0.00051
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-79