Описание
Inappropriate implementation in Fullscreen in Google Chrome on Android prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Medium)
Ссылки
- Release Notes
- Permissions Required
Уязвимые конфигурации
Одновременно
EPSS
4.7 Medium
CVSS3
8.8 High
CVSS3
Дефекты
Связанные уязвимости
Inappropriate implementation in Fullscreen in Google Chrome on Android prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Medium)
Inappropriate implementation in Fullscreen in Google Chrome on Android ...
Inappropriate implementation in Fullscreen in Google Chrome on Android prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Medium)
Уязвимость компонента Fullscreen браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю обойти получить несанкционированный доступ к ограниченным функциональным возможностям
EPSS
4.7 Medium
CVSS3
8.8 High
CVSS3