Inappropriate implementation in PictureInPicture in Google Chrome prior to 113.0.5672.63 allowed a remote attacker who had compromised the renderer process to obfuscate the security UI via a crafted HTML page. (Chromium security severity: Low)
References
| Link | Resource |
|---|---|
| https://chromereleases.googleblog.com/2023/05/stable-channel-update-for-desktop.html | Release Notes |
| https://crbug.com/1416380 | Issue Tracking Permissions Required |
| https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6P5RJ6UD37IPBWU3GPQNMIUFVOVCGSLY/ | Mailing List |
| https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U3V6GPGMY6ZWVWPECMQGGOKQVATXJ5BA/ | Mailing List |
| https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Z4JI552XDFD6DYFU6WNCRBCAXWOFOOSF/ | Mailing List |
| https://security.gentoo.org/glsa/202309-17 | Third Party Advisory |
| https://www.debian.org/security/2023/dsa-5398 | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
History
10 May 2023, 04:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
09 May 2023, 17:10
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 4.3 |
| CWE | NVD-CWE-noinfo | |
| CPE | cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:* cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:* |
|
| References | (MISC) https://chromereleases.googleblog.com/2023/05/stable-channel-update-for-desktop.html - Release Notes | |
| References | (MISC) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6P5RJ6UD37IPBWU3GPQNMIUFVOVCGSLY/ - Mailing List | |
| References | (MISC) https://crbug.com/1416380 - Issue Tracking, Permissions Required | |
| References | (MISC) https://www.debian.org/security/2023/dsa-5398 - Third Party Advisory |
07 May 2023, 03:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
05 May 2023, 04:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
03 May 2023, 00:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-05-03 00:15
Updated : 2024-02-04 23:37
NVD link : CVE-2023-2468
Mitre link : CVE-2023-2468
CVE.ORG link : CVE-2023-2468
JSON object : View
Products Affected
- chrome
debian
- debian_linux
fedoraproject
- fedora
CWE