Medium · published September 26, 2022
CVSS calls it medium at 6.5. It is confirmed in active exploitation. It sits in the 91.6th percentile for exploit probability.
⚠️ A crafty crafted HTML page is all it takes for an attacker to send you on a wild goose chase to a malicious website in Google Chrome on Android! 🔍 Think of it like a travel brochure that misleads you to a dangerous destination, where the brochure looks official but leads you nowhere good—an untrusted source can easily trick you! An attacker could redirect your browser, putting your device at risk and exposing sensitive information. This could lead to phishing attempts or malware installations, which is absolutely devastating for your privacy and security!
Think of it like a travel brochure that misleads you to a dangerous destination, where the brochure looks official but leads you nowhere good—an untrusted source can easily trick you! This vulnerability arises from insufficient validation of untrusted input in Intents, allowing a remote attacker to control the destination of a link you click, effectively leading you into a trap without your consent.
An attacker could redirect your browser, putting your device at risk and exposing sensitive information. This could lead to phishing attempts or malware installations, which is absolutely devastating for your privacy and security! Update your Google Chrome on Android to version 104.0.5112.101 or later immediately. Always be cautious about the links you click, especially from untrustworthy sources. Regularly check for updates to keep your device secure. 🛡️ You've got this! Just follow these steps, and you'll be back in control of your browsing experience in no time! ✨