Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-4369

Insufficient data validation in Systems Extensions in Google Chrome on ChromeOS prior to 116.0.5845.120 allowed an attacker who convinced a user to install a malicious extension to bypass file restrictions via a crafted HTML page. (Chromium security severity: Medium)

Published

2023-08-15T18:15:13.687

Last Modified

2025-05-05T16:15:50.190

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 8.8 (HIGH)

Weaknesses
  • Type: Primary
    NVD-CWE-Other
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application google chrome < 116.0.5845.96 Yes
Operating System google chrome_os - No
References