Farras Givari

An inappropriate implementation in Downloads allows an attacker to perform UI spoofing via a crafted Chrome Extension, provided they can convince a user to install a malicious extension.

A spoofing issue exists within the DOM: Core & HTML component.

Name of the Vulnerable Software and Affected Versions: Microsoft Edge for Android (affected versions not specified) Description: A user interface (UI) misrepresentation of critical information in Microsoft Edge for Android can allow an unauthorized attacker to perform spoofing over a network. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 147.0.7727.55 Description A security flaw in the Downloads user interface in Google Chrome, before version 147.0.7727.55, could allow a remote attacker to perform UI spoofing. This requires convincing a user to perform specific UI gestures on a crafted HTML page. Recommendations Update Google Chrome to version 147.0.7727.55 or later.

An inappropriate implementation in Downloads in Google Chrome on Android allowed a remote attacker to perform UI spoofing via a crafted HTML page.

The issue in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.