Umar Farooq

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 149.0.7827.53 **Description** An inappropriate implementation in the File Input component allows a remote attacker to perform UI spoofing. This is achieved by convincing a user to perform specific UI gestures while interacting with a crafted HTML page. **Recommendations** Update to version 149.0.7827.53 or later.

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 139.0.7258.127 Description: A use-after-free issue existed in Aura within Google Chrome. This allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page by convincing a user to perform specific UI gestures. The Chromium security severity is rated as Medium. Recommendations: Update Google Chrome to version 139.0.7258.127 or later.

Name of the Vulnerable Software and Affected Versions: Firefox for Android versions prior to 140 Description: The issue allows an attacker to bypass the default prompt that appears when a link can be opened in an external application, potentially exposing the user to security risks or privacy leaks in external applications. Recommendations: For Firefox for Android versions prior to 140, update to version 140 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 132.0.6834.83 **Description** The issue is related to an inappropriate implementation in Fullscreen mode, allowing a remote attacker to perform UI spoofing via a crafted HTML page. This could enable the attacker to bypass existing security restrictions and execute a user interface spoofing attack. The severity of this issue is classified as medium by Chromium. **Recommendations** For Google Chrome versions prior to 132.0.6834.83, update to version 132.0.6834.83 or later to resolve the issue. As a temporary workaround, consider disabling Fullscreen mode until a patch is available. Restrict access to crafted HTML pages to minimize the risk of exploitation. Avoid using Fullscreen mode in Google Chrome on Windows until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 134 **Description** When redirecting to an invalid protocol scheme, an attacker could spoof the address bar. This issue only affects Android operating systems, with other operating systems being unaffected. **Recommendations** For Firefox versions prior to 134, update to version 134 or later to resolve the issue. As a temporary workaround, consider restricting access to potentially vulnerable `protocol scheme` handling until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 139.0.7258.66 **Description** An inappropriate implementation in Picture in Picture functionality allowed a remote attacker to perform UI spoofing. The attacker could convince a user to engage in specific UI gestures on a crafted HTML page to exploit this issue. **Recommendations** Update Google Chrome to version 139.0.7258.66 or later.

Name of the Vulnerable Software and Affected Versions: Mozilla Firefox versions prior to 133 Thunderbird versions prior to 133 Description: The issue is related to the Private Browsing Mode in Mozilla Firefox and Thunderbird on Android operating systems. It involves the potential for sensitive information, such as passwords, to be inadvertently stored in the cloud-based clipboard history if this feature is enabled. This could allow a remote attacker to gain unauthorized access to protected information. Recommendations: For Mozilla Firefox versions prior to 133, update to version 133 or later to resolve the issue. For Thunderbird versions prior to 133, update to version 133 or later to resolve the issue. As a temporary workaround, consider disabling the cloud-based clipboard history feature until a patch is available. Restrict access to sensitive information in Private Browsing tabs to minimize the risk of exploitation.

Name of the Vulnerable Software and Affected Versions: Firefox versions prior to 133 Firefox ESR versions prior to 128.5 Thunderbird versions prior to 133 Thunderbird versions prior to 128.5 Description: When handling keypress events, an attacker may have been able to trick a user into bypassing the "Open Executable File?" confirmation dialog. This could have led to malicious code execution. The issue is related to incorrect event handling due to improper code generation management. Recommendations: For Firefox versions prior to 133, update to version 133 or later to resolve the issue. For Firefox ESR versions prior to 128.5, update to version 128.5 or later to resolve the issue. For Thunderbird versions prior to 133, update to version 133 or later to resolve the issue. For Thunderbird versions prior to 128.5, update to version 128.5 or later to resolve the issue. As a temporary workaround, consider disabling the execution of files from untrusted sources until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 127.0.6533.72 Microsoft Edge (affected versions not specified) **Description** The issue is related to insufficient validation of untrusted input in the Safe Browsing feature, which can be exploited by a remote attacker to bypass discretionary access control via a malicious file. This can be achieved if the attacker convinces a user to engage in specific UI gestures. The estimated number of potentially affected devices worldwide is not provided. **Recommendations** For Google Chrome versions prior to 127.0.6533.72, update to version 127.0.6533.72 or later to resolve the issue. For Microsoft Edge, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 117 Firefox ESR versions prior to 115.2 Thunderbird versions prior to 115.2 **Description** The issue is related to insufficient warning about potentially hazardous actions, allowing a remote attacker to download arbitrary files. Specifically, Excel `.xll` add-in files did not have a blocklist entry in Firefox's executable blocklist, which enabled them to be downloaded without warnings about their potential harm. **Recommendations** For Firefox versions prior to 117, update to version 117 or later to resolve the issue. For Firefox ESR versions prior to 115.2, update to version 115.2 or later to resolve the issue. For Thunderbird versions prior to 115.2, update to version 115.2 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 116 Firefox ESR versions prior to 115.2 Thunderbird versions prior to 115.2 **Description** The issue is related to incorrect handling of symbolic links before accessing a file, allowing a remote attacker to impact data integrity. A website could obscure the full screen notification by using a URL with a scheme handled by an external program, such as a `mailto` URL, leading to user confusion and possible spoofing attacks. **Recommendations** For Firefox versions prior to 116, update to version 116 or later. For Firefox ESR versions prior to 115.2, update to version 115.2 or later. For Thunderbird versions prior to 115.2, update to version 115.2 or later.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 101.0.4951.41 Microsoft Edge (affected versions not specified) **Description** The issue is related to incorrect security UI in the downloads feature, allowing a remote attacker to spoof the APK downloads dialog via a crafted HTML page. This could potentially lead to the disclosure of protected information. The estimated number of potentially affected devices worldwide is not specified. **Recommendations** For Google Chrome versions prior to 101.0.4951.41, update to version 101.0.4951.41 or later to resolve the issue. For Microsoft Edge, at the moment, there is no information about a newer version that contains a fix for this vulnerability.