The remaining three medium-rated vulnerabilities are also of the inappropriate implementation variety.ĬVE-2023-3736 impacts the custom tabs function and was reported by Philipp Beer who earned a $2000 bounty.ĬVE-2023-3737 impacts the notifications function, reported by Narendra Bhati, who was also awarded a $2000 bounty.ĬVE-2023-3738 impacts the autofill function and earned $1000 for Hafiizh. Ahmed ElMasry also found this one and was awarded a further $2000 bounty. This time it affects the web application programming interface (API) permission prompts. Another bounty of $5000 was awarded for this one, this time to Thomas Orlita.ĬVE-2023-3735 is, you’ve guessed it, an inappropriate implementation vulnerability.
Ahmed ElMasry was awarded a $5000 bounty for reporting it to Google.ĬVE-2023-3734 is another inappropriate implementation vulnerability, this time within the floating video Picture in Picture functionality. The six Chrome security vulnerabilities that have been allocated a medium CVE rating, and the hackers who reported them to Google, also awarded a total of $16,000 in bounties, are:ĬVE-2023-3733 is a vulnerability that sits within an inappropriate implementation of the Chrome WebApp install function. MORE FROM FORBES Windows Users Urged To Update As Microsoft Confirms New Zero-Day Exploits By Davey Winder What Are The Six New Chrome Security Vulnerabilities With Medium Ratings?
Google Chrome vulnerability information disclosure statement Davey Winder/Google
0 kommentar(er)
