Robbe Van Roey

A flaw exists in Google Chrome's file input handling that could allow a remote attacker to perform UI spoofing. This requires convincing a user to interact with a specially crafted HTML page through specific UI gestures. The security severity is rated as low.

A Cross-Site Request Forgery (CSRF) issue exists in Elgato Key Lights and related light products. This allows an attacker to remotely control a victim’s lights by hosting a malicious webpage.