2 matches found
chromium-browser: various fixes from internal audits
The CustomButton::AcceleratorPressed function in ui/views/controls/button/custombutton.cc in Google Chrome before 48.0.2564.82 allows remote attackers to spoof URLs via vectors involving an unfocused custom button...
4.3CVSS7.4AI score0.01134EPSS
SaveExploits0References5
chromium-browser: URL spoofing using pdf files in unspecified
content/browser/webcontents/webcontentsimpl.cc in Google Chrome before 44.0.2403.89 does not ensure that a PDF document's modal dialog is closed upon navigation to an interstitial page, which allows remote attackers to spoof URLs via a crafted document, as demonstrated by the alertdialog.pdf...
4.3CVSS7.4AI score0.01795EPSS
SaveExploits0References5
20