Shadow2639

**Nome do Software Vulnerável e Versões Afetadas** Google Chrome para Android em versões anteriores à 137.0.7151.55 **Descrição** O problema está relacionado a uma implementação inadequada em Messages, permitindo que um atacante remoto realize falsificação de interface do usuário por meio de uma página HTML especialmente criada, caso o usuário seja convencido a realizar gestos específicos na interface. **Recomendações** Para o Google Chrome para Android em versões anteriores à 137.0.7151.55, atualize para a versão 137.0.7151.55 ou posterior para resolver o problema.

**Name of the Vulnerable Software and Affected Versions** Android Mobile Whale browser app versions prior to 3.0.1.2 **Description** The issue allows an attacker to bypass the browser unlock function using the 'Open in Whale' feature. **Recommendations** For versions prior to 3.0.1.2, update to version 3.0.1.2 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Google Chrome on Android versions prior to 117.0.5938.62 **Description** The issue is related to an inappropriate implementation in Intents, allowing a remote attacker to obfuscate security UI via a crafted HTML page. This could potentially enable the attacker to bypass security restrictions. The severity of this issue is classified as Low by Chromium. **Recommendations** For Google Chrome on Android versions prior to 117.0.5938.62, update to version 117.0.5938.62 or later to resolve the issue. As a temporary workaround, consider restricting the use of Intents in Google Chrome on Android until a patch is applied.

**Name of the Vulnerable Software and Affected Versions** Samsung Internet versions prior to 21.0.0.41 **Description** The issue is related to an improper configuration that allows an attacker to bypass SameSite Cookie restrictions. This could potentially lead to security breaches, although specific details about the estimated number of affected devices or real-world incidents are not provided. **Recommendations** For versions prior to 21.0.0.41, update to version 21.0.0.41 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive cookies to minimize the risk of exploitation.