VDB
CVE-2023-4369
CVE-2023-4369
PUBLISHED
CVSS 8.800000190734863 HIGH
Insufficient data validation in Systems Extensions in Google Chrome on ChromeOS prior to 116.0.5845.120 allowed an attacker who convinced a user to install a malicious extension to bypass file restrictions via a crafted HTML page. (Chromium security severity: Medium)
EPSS 0.37% · 31.2th percentile
Risk Scores
CVSS 3.1
8.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
0.37%
31.2th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| chrome | 0 | |
| Chrome | 116.0.5845.120 |
Timeline
- Aug 15, 2023 CVE Published
- Aug 16, 2023 EPSS Score
- Sep 19, 2023 EPSS Score
- Oct 22, 2023 EPSS Score
- Nov 25, 2023 EPSS Score
- Dec 29, 2023 EPSS Score
- Jan 31, 2024 EPSS Score
- Mar 5, 2024 EPSS Score
- Apr 8, 2024 EPSS Score
- May 12, 2024 EPSS Score
- Jun 14, 2024 EPSS Score
- Jul 18, 2024 EPSS Score