Inappropriate implementation in Picture In Picture in Google Chrome prior to 114.0.5735.90 allowed a remote attacker who had compromised the renderer process to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Medium)
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: Chrome
Published: 2023-05-30T21:31:40.746Z
Updated: 2024-08-02T06:41:04.268Z
Reserved: 2023-05-27T19:39:14.762Z
Link: CVE-2023-2937
Vulnrichment
No data.
NVD
Status : Modified
Published: 2023-05-30T22:15:10.393
Modified: 2024-01-31T17:15:11.553
Link: CVE-2023-2937
Redhat
No data.