Skip to content
OpenAdvisories
Medium · 4.3 CVE-2023-7282 EUVD-2023-59665GHSA-f6r8-rvcx-qr37

Inappropriate implementation in Navigation in Google Chrome prior to 113.0.5672.63 allowed a remote attacker who convinced a user to engage…

Published Sep 23, 2024 · Updated Sep 24, 2024 · Assigned by Chrome

Description

Inappropriate implementation in Navigation in Google Chrome prior to 113.0.5672.63 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform domain spoofing via a crafted HTML page. (Chromium security severity: Low)

Affected products

VendorProductAffectedFixed
Google Chrome 113.0.5672.63 – < 113.0.5672.63 113.0.5672.63

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 chromium 113.0.5672.63-1 —
Debian 13 chromium 113.0.5672.63-1 —
Debian 12 chromium 113.0.5672.63-1 —
Debian 11 chromium 113.0.5672.63-1~deb11u1 DSA-5398-1

Advisories 1

References