2893 matches found
DEBIAN-CVE-2023-7281
Inappropriate implementation in Compositing in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...
CVE-2024-7020
Inappropriate implementation in Autofill in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...
CVE-2024-7020
CVE-2024-7020 affects Google Chrome (Autofill) via an incorrect UI handling in Chromium before 124.0.6367.60. A remote attacker could induce UI spoofing by a crafted HTML page; CVSS indicates network attack vector, low impact to confidentiality/integrity, with user interaction required and UI acc...
CVE-2024-7020
Inappropriate implementation in Autofill in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...
CVE-2024-7020
Inappropriate implementation in Autofill in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...
CVE-2023-7281
Inappropriate implementation in Compositing in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...
CVE-2023-7281
Inappropriate implementation in Compositing in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...
CVE-2023-7281
CVE-2023-7281 – Google Chrome/ui spoofing via crafted HTML page . The issue arises from an inappropriate implementation in the Chrome browser’s Compositing feature, allowing a remote attacker to perform UI spoofing. Affected product: Google Chrome (Chromium base) prior to version 119.0.6045.105. ...
CVE-2023-7281
Inappropriate implementation in Compositing in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...
CVE-2024-7019
Inappropriate implementation in UI in Google Chrome prior to 124.0.6367.60 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...
CVE-2024-7019
Inappropriate implementation in UI in Google Chrome prior to 124.0.6367.60 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...
CVE-2024-7019
CVE-2024-7019 describes an insecure UI implementation in Google Chrome (Chromium-based) before 124.0.6367.60, where a remote attacker could induce UI spoofing via a crafted HTML page if the user performs specific UI gestures. The evidence across connected sources consistently references the same ...
CVE-2024-7019
Inappropriate implementation in UI in Google Chrome prior to 124.0.6367.60 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...
SUSE CVE-2024-8388
Multiple prompts and panels from both Firefox and the Android OS could be used to obscure the notification announcing the transition to fullscreen mode after the fix for CVE-2023-6870 in Firefox 121. This could lead to spoofing the browser UI if the sudden appearance of the prompt distracted the...
Google Chrome 安全漏洞
Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in versions prior to Google Chrome 124.0.6367.60, which can be exploited by remote attackers to conduct UI spoofing via specially crafted HTML pages...
Google Chrome 安全漏洞
Google Chrome is a web browser from Google, an American company. A security vulnerability exists in Google Chrome prior to version 119.0.6045.105, which stems from an improper implementation of the compositing feature and can be exploited by remote attackers to perform UI spoofing via a crafted...
Microsoft Edge (Chromium) < 129.0.2792.52 (CVE-2025-29806)
The version of Microsoft Edge installed on the remote Windows host is prior to 129.0.2792.52. It is, therefore, affected by a vulnerability as referenced in the March 21, 2025 advisory. - No cwe for this issue in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a...
SUSE CVE-2024-8909
Inappropriate implementation in UI in Google Chrome on iOS prior to 129.0.6668.58 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...
KLA73521 Multiple vulnerabilities in Microsoft Browser
Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, bypass security restrictions, spoof user interface. Below is a complete list of vulnerabilities: 1. Type confusion vulnerability in V8 ca...
