CyberRota Analysis
AI-GeneratedA vulnerability in the CredentialProvider of Google Chrome on Windows prior to version 152.0.7977.75 allows remote attackers to exploit a confused deputy scenario, potentially leaking sensitive information through a specially crafted HTML page. While the Chromium security team has classified the severity as low, organizations using affected versions of Chrome should prioritize updating to mitigate the risk of information exposure. This is particularly relevant for environments where sensitive data is handled or where Chrome is widely deployed.
Original NVD Description
Confused deputy in CredentialProvider in Google Chrome on on Windows prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to leak sensitive information via a crafted HTML page. (Chromium security severity: Low)
Related CVEs
Other vulnerabilities affecting the same vendor(s)