CyberRota Analysis
AI-GeneratedGoogle Chrome versions prior to 153.0.8010.36 are vulnerable due to a lack of proper authorization in the Contacts feature, which could allow a remote attacker to exploit the renderer process through social engineering tactics. This vulnerability may lead to the unauthorized disclosure of sensitive information via a specially crafted HTML page. Users and organizations utilizing affected Chrome versions should prioritize updating to mitigate potential risks associated with this low-severity issue.
Original NVD Description
Missing authorization in Contacts in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)
Related CVEs
Other vulnerabilities affecting the same vendor(s)