DEBIAN-CVE-2023-2460

DEBIAN-CVE-2023-2460 PUBLISHED CVSS 7.099999904632568 HIGH

Insufficient validation of untrusted input in Extensions in Google Chrome prior to 113.0.5672.63 allowed an attacker who convinced a user to install a malicious extension to bypass file access checks via a crafted HTML page. (Chromium security severity: Medium)

Risk Scores

CVSS 3.1

7.099999904632568

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N

Affected Products

Vendor	Product	Versions
Debian:11	chromium	, 111.0.5563.64-1,
Debian:13	chromium	0, 0, 0
Debian:14	chromium	0, 0, 0
Debian:12	chromium	0, 0, 0

Timeline

May 3, 2023 CVE Published
Apr 28, 2026 CVE Updated

References

https://security-tracker.debian.org/tracker/CVE-2023-2460 advisory

Open in Interactive Console →