CISA-2023-0700 — Vulnetix

CISA-2023-0700 PUBLISHED CVSS 6.5 MEDIUM

Reported by Chrome · Published February 7, 2023

Inappropriate implementation in Download in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to potentially spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Medium)

Risk Scores

CVSS 3.1

6.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Affected Products

Vendor	Product	Versions
Google	Chrome	unspecified
Google	Chrome	unspecified, unspecified

Timeline

Feb 7, 2023 CVE Published
Mar 20, 2025 CVE Updated
Apr 26, 2026 Security Advisory

References

GLSA-202309-17 vendor-advisory

Open in Interactive Console →