Skip to content
OpenAdvisories
Unscored CVE-2021-4316 EUVD-2021-34145GHSA-3p3m-mqcr-8mfw

Inappropriate implementation in Cast UI in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to spoof browser UI via a crafted …

Published Jul 28, 2023 · Updated Feb 13, 2025 · Assigned by Chrome

Vendor: Google Product: Chrome Package: chromium Category: Browsers Ecosystem: Debian

Description

Inappropriate implementation in Cast UI in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to spoof browser UI via a crafted HTML page. (Chromium security severity: Low)

Affected products

VendorProductAffectedFixed
Google Chrome 96.0.4664.45 – < 96.0.4664.45 96.0.4664.45

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 chromium 97.0.4692.71-0.1 —
Debian 13 chromium 97.0.4692.71-0.1 —
Debian 12 chromium 97.0.4692.71-0.1 —
Debian 11 chromium 97.0.4692.71-0.1~deb11u1 DSA-5046-1

Advisories 1

References