CVE-2023-7281

2024-09-2321:56:30

Chrome

github.com

google chrome

ui spoofing

compositing

html page

remote attacker

AI Score

6.1

Confidence

High

SSVC

Exploitation

poc

Automatable

Technical Impact

partial

JSON

Inappropriate implementation in Compositing in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"
    ],
    "vendor": "google",
    "product": "chrome",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "119.0.6045.105",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]