Misconfigured Security Controls

🗓️ 19 Oct 2023 04:15:44Reported by Veracode Vulnerability DatabaseType

veracode

veracode🔗 sca.analysiscenter.veracode.com👁 15 Views

Misconfigured security controls in chromium Fullscreen feature vulnerabilit

Reporter	Title	Published	Views	Family All 321
FreeBSD	chromium -- multiple vulnerabilities	10 Oct 202300:00	–	freebsd
AlpineLinux	CVE-2023-5487	11 Oct 202322:28	–	alpinelinux
AstraLinux	Astra Linux - уязвимость в chromium	3 May 202623:59	–	astralinux
Circl	CVE-2023-5487	13 Nov 202320:35	–	circl
CNNVD	Google Chrome Security Vulnerability	10 Oct 202300:00	–	cnnvd
CVE	CVE-2023-5487	11 Oct 202322:28	–	cve
Cvelist	CVE-2023-5487	11 Oct 202322:28	–	cvelist
Debian	[SECURITY] [DSA 5526-1] chromium security update	12 Oct 202317:31	–	debian
Debian CVE	CVE-2023-5487	11 Oct 202322:28	–	debiancve
Tenable Nessus	Debian DSA-5526-1 : chromium - security update	13 Oct 202300:00	–	nessus

Vulners

Node

chromium chromiumMatch83.0.4103.116-3.1debian

AND

debian debian_linuxMatch11

OR

chromium chromiumMatch88.0.4324.182-1debian

AND

chromium chromiumMatch83.0.4103.116-3.1debian

AND

debian debian_linuxMatch999

OR

qt6-qtwebengine qt6-qtwebengineMatch6.5.2-r0os

AND

qt6-qtwebengine qt6-qtwebengineMatch6.3.1-r0os

AND

qt6-qtwebengine qt6-qtwebengineMatch6.4.3-r0os

AND

qt6-qtwebengine qt6-qtwebengineMatch6.3.1-r1os

AND

qt6-qtwebengine qt6-qtwebengineMatch6.2.3-r2os

AND

qt6-qtwebengine qt6-qtwebengineMatch6.3.0-r1os

AND

qt6-qtwebengine qt6-qtwebengineMatch6.3.0-r0os

AND

qt6-qtwebengine qt6-qtwebengineMatch6.2.4-r0os

AND

qt6-qtwebengine qt6-qtwebengineMatch6.4.0-r1os

AND

qt6-qtwebengine qt6-qtwebengineMatch6.4.2-r2os

AND

qt6-qtwebengine qt6-qtwebengineMatch6.2.4-r1os

AND

qt6-qtwebengine qt6-qtwebengineMatch6.2.3-r0os

AND

qt6-qtwebengine qt6-qtwebengineMatch6.2.3-r3os

AND

qt6-qtwebengine qt6-qtwebengineMatch6.5.3-r0os

AND

qt6-qtwebengine qt6-qtwebengineMatch6.5.0-r0os

AND

qt6-qtwebengine qt6-qtwebengineMatch6.5.1-r0os

AND

qt6-qtwebengine qt6-qtwebengineMatch6.4.2-r5os

AND

qt6-qtwebengine qt6-qtwebengineMatch6.4.1-r0os

AND

qt6-qtwebengine qt6-qtwebengineMatch6.5.2-r1os

AND

qt6-qtwebengine qt6-qtwebengineMatch6.4.2-r4os

AND

qt6-qtwebengine qt6-qtwebengineMatch6.4.0-r0os

AND

qt6-qtwebengine qt6-qtwebengineMatch6.6.0-r0os

AND

qt6-qtwebengine qt6-qtwebengineMatch6.2.2-r0os

AND

qt6-qtwebengine qt6-qtwebengineMatch6.2.3-r1os

AND

qt6-qtwebengine qt6-qtwebengineMatch6.5.0-r2os

AND

qt6-qtwebengine qt6-qtwebengineMatch6.2.2-r1os

AND

qt6-qtwebengine qt6-qtwebengineMatch6.4.2-r0os

AND

qt6-qtwebengine qt6-qtwebengineMatch6.4.1-r1os

AND

qt6-qtwebengine qt6-qtwebengineMatch6.5.0-r1os

AND

qt6-qtwebengine qt6-qtwebengineMatch6.5.1-r1os

AND

qt6-qtwebengine qt6-qtwebengineMatch6.3.2-r0os

AND

alpinelinux alpine_linuxMatchedge

Source	Link
security-tracker	www.security-tracker.debian.org/tracker/CVE-2023-5487
chromereleases	www.chromereleases.googleblog.com/2023/10/stable-channel-update-for-desktop_10.html
crbug	www.crbug.com/1062251
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/F5QCMP6KKWPDZZLFU7YXSZDHEKOE7BXO/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/M4GHJ3FK5NPHDRUR4OJOI4UU6FKSOOGG/
security	www.security.gentoo.org/glsa/202311-11
security	www.security.gentoo.org/glsa/202312-07
security	www.security.gentoo.org/glsa/202401-34
debian	www.debian.org/security/2023/dsa-5526

31 Jan 2024 20:06Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.16.5

EPSS0.00034

chromium misconfigured security controls fullscreen feature vulnerability malicious extension chrome extension bypass navigation restrictions