VDB

CISA-2023-5485

CISA-2023-5485 PUBLISHED CVSS 4.3 MEDIUM

Reported by Chrome · Published October 11, 2023

Inappropriate implementation in Autofill in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to bypass autofill restrictions via a crafted HTML page. (Chromium security severity: Low)

Risk Scores

CVSS 3.1
4.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Affected Products

VendorProductVersions
GoogleChrome118.0.5993.70
GoogleChrome118.0.5993.70, 118.0.5993.70

Timeline

  • Oct 11, 2023 CVE Published
  • Jun 16, 2025 CVE Updated
  • Apr 26, 2026 Distribution Patch

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›