CVE-2023-1225

2023-03-0721:42:17

Chrome

www.cve.org

insufficient policy enforcement

google chrome

ios

same origin policy

remote attacker

crafted html page

navigation

chromium security

medium severity

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.4%

JSON

Insufficient policy enforcement in Navigation in Google Chrome on iOS prior to 111.0.5563.64 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)

CNA Affected

[
  {
    "vendor": "Google",
    "product": "Chrome",
    "versions": [
      {
        "version": "111.0.5563.64",
        "status": "affected",
        "lessThan": "111.0.5563.64",
        "versionType": "custom"
      }
    ]
  }
]