PT-2023-9416 · Google+3 · Google Chrome+3
Suhwan Song
·
Publicado
2023-10-31
·
Atualizado
2024-11-29
·
CVE-2023-7013
CVSS v3.1
5.4
Média
| Vetor | AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 119.0.6045.105
Description
The issue is related to an inappropriate implementation in the Compositing component of Google Chrome, which can be exploited by a remote attacker to potentially spoof the security UI via a crafted HTML page. This can be achieved by creating a specially designed HTML page.
Recommendations
For versions prior to 119.0.6045.105, update to version 119.0.6045.105 or later to resolve the issue. As a temporary workaround, consider restricting access to potentially vulnerable HTML pages until the update is applied.
Exploit
Correção
Improper Access Control
Clickjacking
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Astra Linux
Google Chrome
Red Os