More information about this CVE will likely be available in a few days

Description

Insufficient policy enforcement in Data Transfer in Google Chrome prior to 128.0.6613.84 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

Related CPE's

Could not find any relations

References

https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop_21.html

https://issues.chromium.org/issues/40060358

Weaknesses

Could not find any weaknesses

CVSS impact metrics

Could not find any metrics

Information

Source identifier

[email protected]

Vulnerability status

Undergoing analysis

Published

2024-08-21T21:15:09.697

4 weeks ago

Last modified

2024-08-22T12:48:02.790

4 weeks ago