CVE-2023-2464

Inappropriate implementation in PictureInPicture in Google Chrome prior to 113.0.5672.63 allowed an attacker who convinced a user to install a malicious extension to perform an origin spoof in the security UI via a crafted HTML page. Chromium security severity: Medium...

openSUSE 15 Security Update : chromium (openSUSE-SU-2023:0092-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2023:0092-1 advisory. - Heap buffer overflow in Visuals in Google Chrome prior to 112.0.5615.49 allowed a remote attacker who had compromised the renderer process to...

Spoofing Attack

Google Chrome is vulnerable to Spoofing Attack. The vulnerability exists due to the incorrect security UI in Navigation, which allows an attacker to perform domain spoofing via a crafted HTML page...

Spoofing Attack

Google Chrome is vulnerable to Spoofing Attack. The vulnerability exists due to the incorrect security UI in Picture In Picture, which allows an attacker to potentially perform navigation spoofing via a crafted HTML page...

Debian DSA-5386-1 : chromium - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5386 advisory. - Heap buffer overflow in Visuals in Google Chrome prior to 112.0.5615.49 allowed a remote attacker who had compromised the renderer process to potentially exploi...

Fedora 36 : chromium (2023-78e350cb88)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-78e350cb88 advisory. update to 112.0.5615.49. Fixes the following security issues: CVE-2023-1528 CVE-2023-1529 CVE-2023-1530 CVE-2023-1531 CVE-2023-1532 CVE-2023-1533...

Google Chrome Picture In Picture Security Bypass Vulnerability

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in Google Chrome Picture In Picture, which stems from an incorrect security UI in Picture In Picture. An attacker can exploit this vulnerability to bypass security restrictions...

Google Chrome Security Updates (stable-channel-update-for-desktop-2023-04) - Windows

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

SUSE CVE-2023-1822

Incorrect security UI in Navigation in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to perform domain spoofing via a crafted HTML page. Chromium security severity: Low...

CVE-2023-1816

Incorrect security UI in Picture In Picture in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to potentially perform navigation spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2023-1816

Incorrect security UI in Picture In Picture in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to potentially perform navigation spoofing via a crafted HTML page. Chromium security severity: Medium...

Design/Logic Flaw

Incorrect security UI in Navigation in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to perform domain spoofing via a crafted HTML page. Chromium security severity: Low...

Design/Logic Flaw

Incorrect security UI in Picture In Picture in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to potentially perform navigation spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2023-1816

Incorrect security UI in Picture In Picture in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to potentially perform navigation spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2023-1816

Incorrect security UI in Picture In Picture in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to potentially perform navigation spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2023-1816

CVE-2023-1816 affects Google Chrome/Chromium’s Picture-in-Picture feature, with root cause described as an incorrect security UI. It allows a remote attacker to potentially perform navigation spoofing through a crafted HTML page. Affected versions are Chrome/Chromium prior to 112.0.5615.49; remed...

CVE-2023-1816

Incorrect security UI in Picture In Picture in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to potentially perform navigation spoofing via a crafted HTML page. Chromium security severity: Medium...

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 112 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 112.0.5615.49 Linux and Mac, 112.0.5615.49/50 Windows contains a number of fixes and improvements -- a list of changes is...

Google Chrome < 112.0.5615.49 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 112.0.5615.49. It is, therefore, affected by multiple vulnerabilities as referenced in the 202304stable-channel-update-for-desktop advisory. - Heap buffer overflow in Browser History in Google Chrome prior to...

Google Chrome < 112.0.5615.49 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 112.0.5615.49. It is, therefore, affected by multiple vulnerabilities as referenced in the 202304stable-channel-update-for-desktop advisory. - Heap buffer overflow in Browser History in Google Chrome prior to 112.0.5615.4...