CVE-2023-7013

2024-07-1622:14:01

Chrome

github.com

inappropriate implementation

compositing

google chrome

remote attacker

spoof security ui

crafted html page

chromium

medium severity

AI Score

Confidence

High

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

Inappropriate implementation in Compositing in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to potentially spoof security UI via a crafted HTML page. (Chromium security severity: Medium)

CNA Affected

[
  {
    "vendor": "Google",
    "product": "Chrome",
    "versions": [
      {
        "status": "affected",
        "version": "119.0.6045.105",
        "lessThan": "119.0.6045.105",
        "versionType": "custom"
      }
    ]
  }
]