PRIOn knowledge basePRION:CVE-2023-2937

HistoryMay 30, 2023 - 10:15 p.m.

Information disclosure

2023-05-3022:15:00

PRIOn knowledge base

www.prio-n.com

information disclosure

google chrome

picture in picture

implementation flaw

spoofing

omnibox

nvd

remote attacker

renderer process

crafted html page

chromium

medium severity

3.4 Low

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.5%

JSON

Inappropriate implementation in Picture In Picture in Google Chrome prior to 114.0.5735.90 allowed a remote attacker who had compromised the renderer process to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Medium)

CPENameOperatorVersion
chromelt114.0.5735.90

CPE	Name	Operator	Version
	chrome	lt	114.0.5735.90

References

chromereleases.googleblog.com/2023/05/stable-channel-update-for-desktop_30.html

crbug.com/1413813

security.gentoo.org/glsa/202311-11

security.gentoo.org/glsa/202401-34

www.debian.org/security/2023/dsa-5418