Insufficient data validation in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass discretionary access control via a crafted HTML page. (Chromium security severity: Medium)

Insufficient data validation in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass discretionary access control via a crafted HTML page. (Chromium security severity: Medium)

Security update for chromium

Ein Angreifer kann diese Schwachstellen in Google Chrome und Microsoft Edge ausnutzen, um nicht näher spezifizierte Auswirkungen, einschließlich möglicher Codeausführung, zu verursachen.