Mohit Raj

**Name of the Vulnerable Software and Affected Versions** Google Chrome on Android versions prior to 137.0.7151.55 **Description** The issue is related to an inappropriate implementation in Messages, allowing a remote attacker to perform UI spoofing via a crafted HTML page if the user is convinced to engage in specific UI gestures. **Recommendations** For Google Chrome on Android versions prior to 137.0.7151.55, update to version 137.0.7151.55 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Android Mobile Whale browser app versions prior to 3.0.1.2 **Description** The issue allows an attacker to bypass the browser unlock function using the 'Open in Whale' feature. **Recommendations** For versions prior to 3.0.1.2, update to version 3.0.1.2 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Google Chrome on Android versions prior to 117.0.5938.62 **Description** The issue is related to an inappropriate implementation in Intents, allowing a remote attacker to obfuscate security UI via a crafted HTML page. This could potentially enable the attacker to bypass security restrictions. The severity of this issue is classified as Low by Chromium. **Recommendations** For Google Chrome on Android versions prior to 117.0.5938.62, update to version 117.0.5938.62 or later to resolve the issue. As a temporary workaround, consider restricting the use of Intents in Google Chrome on Android until a patch is applied.

**Name of the Vulnerable Software and Affected Versions** Samsung Internet versions prior to 21.0.0.41 **Description** The issue is related to an improper configuration that allows an attacker to bypass SameSite Cookie restrictions. This could potentially lead to security breaches, although specific details about the estimated number of affected devices or real-world incidents are not provided. **Recommendations** For versions prior to 21.0.0.41, update to version 21.0.0.41 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive cookies to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Microsoft Edge (Chromium-based) (affected versions not specified) **Description** The issue is related to errors in the representation of information by the user interface, which can allow a remote attacker to conduct spoofing attacks. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 90.0.4430.93 **Description** The issue is related to incorrect security UI in downloads, allowing a remote attacker to perform domain spoofing via a crafted HTML page. This is due to an insufficient mechanism for confirming the source of downloads. The exploitation of this issue can enable a remote attacker to bypass existing security restrictions using a specially crafted HTML page. **Recommendations** For versions prior to 90.0.4430.93, update to version 90.0.4430.93 or later to resolve the issue. As a temporary workaround, consider restricting the use of the download feature in Google Chrome on Android until the update is applied.