Chipsec

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 154.0.8037.92 **Description** Cross-site scripting in the WebUI allows a remote attacker to bypass the web origin policy—a security mechanism that restricts how a document or script loaded from one origin can interact with a resource from another origin—and gain access to a privileged page through a crafted HTML page. **Recommendations** Update Google Chrome to version 154.0.8037.92 or later.