Log in Start free

Vulnerability · Published Oct 11, 2023 · Assigned by Chrome

CVE-2023-5484

Medium 6.5

In plain English

A medium-severity security flaw in Chrome from Google. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.2% (higher than 68% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)6.5Medium
Exploit odds (30 days)1.2%top 32.0% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

Inappropriate implementation in Navigation in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to spoof security UI via a crafted HTML page. (Chromium security severity: Medium)

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Alpine:v3.20qt6-qtwebengine6.6.0-r1ALPINE-CVE-2023-5484
Alpine:v3.21qt6-qtwebengine6.6.0-r1ALPINE-CVE-2023-5484
Alpine:v3.22qt6-qtwebengine6.6.0-r1ALPINE-CVE-2023-5484
Alpine:v3.23qt6-qtwebengine6.6.0-r1ALPINE-CVE-2023-5484
Alpine:v3.24qt6-qtwebengine6.6.0-r1ALPINE-CVE-2023-5484
Debian:12chromium118.0.5993.70-1~deb12u1DEBIAN-CVE-2023-5484
Debian:12chromium118.0.5993.70-1~deb12u1DSA-5526-1
Debian:13chromium118.0.5993.70-1DEBIAN-CVE-2023-5484
Debian:14chromium118.0.5993.70-1DEBIAN-CVE-2023-5484

Affected products (as reported)

VendorProductVersions
Google Chrome 118.0.5993.70 – before 118.0.5993.70

References