CISA-2023-0132 — Vulnetix

CISA-2023-0132 PUBLISHED CVSS 6.5 MEDIUM

Reported by Chrome · Published January 10, 2023

Inappropriate implementation in in Permission prompts in Google Chrome on Windows prior to 109.0.5414.74 allowed a remote attacker to force acceptance of a permission prompt via a crafted HTML page. (Chromium security severity: Medium)

Risk Scores

CVSS 3.1

6.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Affected Products

Vendor	Product	Versions
Google	Chrome	unspecified
Google	Chrome	,

Timeline

Jan 10, 2023 CVE Published
Mar 20, 2025 CVE Updated
Apr 26, 2026 Security Advisory
Apr 26, 2026 Security Advisory

References

GLSA-202305-10 vendor-advisory
GLSA-202311-11 vendor-advisory

Open in Interactive Console →