Skip to content
OpenAdvisories
Medium · 6.3 CVE-2024-13983 EUVD-2024-55076GHSA-c3h3-5hxq-qpc7

Inappropriate implementation in Lens in Google Chrome on iOS prior to 136.0.7103.59 allowed a remote attacker to perform UI spoofing via a …

Published Nov 14, 2025 · Updated Nov 14, 2025 · Assigned by Chrome

Vendor: Google Product: Chrome Package: chromium Category: Browsers Ecosystem: Wolfi

Description

Inappropriate implementation in Lens in Google Chrome on iOS prior to 136.0.7103.59 allowed a remote attacker to perform UI spoofing via a crafted QR code. (Chromium security severity: Low)

Affected products

VendorProductAffectedFixed
Google Chrome 136.0.7103.59 – < 136.0.7103.59 136.0.7103.59

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling chromium 136.0.7103.59-r0 —

References