Google Chrome Script Injection Vulnerability in UI

A vulnerability allowing script injection in the user interface has been identified in Google Chrome versions prior to 148.0.7778.96. This issue, classified as a user-experience cross-site scripting (UXSS) vulnerability, allowed remote attackers to inject arbitrary scripts or HTML by convincing users to perform specific UI gestures on a crafted HTML page.

Impact

Exploitation of this vulnerability could lead to user-experience cross-site scripting, allowing for the injection of scripts that could be executed in the context of the user's session.

Remediation

Users can update to Google Chrome version 148.0.7778.96 or later to address this vulnerability.