PT-2023-2546 · Google+1 · Google Chrome+1

Irvan Kurniawan

+1

·

Publicado

2023-01-10

·

Atualizado

2024-11-29

·

CVE-2023-2463

CVSS v2.0

7.8

Alta

VetorAV:N/AC:L/Au:N/C:N/I:C/A:N
Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 113.0.5672.63
Description The issue is related to an inappropriate implementation in Full Screen Mode, allowing a remote attacker to hide the contents of the Omnibox (URL bar) via a crafted HTML page. This could potentially be exploited by a remote attacker.
Recommendations For Google Chrome on Android versions prior to 113.0.5672.63, update to version 113.0.5672.63 or later to resolve the issue. As a temporary workaround, consider avoiding the use of Full Screen Mode until the update is applied.

Correção

Improperly Implemented Security Check for Standard

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-358

Identificadores relacionados

ALT-PU-2023-1764
ALT-PU-2023-4119
ALT-PU-2023-4763
ALT-PU-2023-4766
ALT-PU-2023-4767
ALT-PU-2023-5790
ALT-PU-2023-6351
ALT-PU-2023-8437
ALT-PU-2024-14286
ALT-PU-2024-14830
BDU:2023-02350
CVE-2023-2463
DSA-5398-1
OPENSUSE-SU-2023:0117-1
OPENSUSE-SU-2024:12922-1
OPENSUSE-SU-2024:12948-1

Produtos afetados

Alt Linux
Google Chrome