Google Chrome
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*, +1 more
- < 148.0.7778.96
A vulnerability in the Autofill feature of Google Chrome prior to version 148.0.7778.96 allowed remote attackers to leak cross-origin data by using a specially crafted HTML page. This issue was due to insufficient policy enforcement, which created a medium-severity security risk.
Exploitation of this vulnerability could lead to unauthorized access to cross-origin data, potentially allowing attackers to gather sensitive information from other domains.
Users can update to Google Chrome version 148.0.7778.96 or later to address this vulnerability.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.