CVE-2023-7281 - Inappropriate implementation in Compositing in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to perform UI spoofing via a crafted HTML page

Back Back to CVE browser

MEDIUM

Inappropriate implementation in Compositing in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to perform UI spoofing via a crafted HTML page

Published Sep 23, 2024

4.3

MEDIUM

CVSS 3.1

EPSS 0.24%

Description

Inappropriate implementation in Compositing in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

Affected products

Vendor Google Product Chrome Default
unknown
Affected
- ≥ 119.0.6045.105, < 119.0.6045.105

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Google	Chrome	unknown	Affected ≥ 119.0.6045.105, < 119.0.6045.105

Vendor Google Product Chrome Default
unknown
Affected
- ≥ 0, < 119.0.6045.105

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Google	Chrome	unknown	Affected ≥ 0, < 119.0.6045.105

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-451

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-59664
Advisory
https://issues.chromium.org/issues/40055233
ExploitIssue Tracking

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-59664		Advisory
https://issues.chromium.org/issues/40055233		ExploitIssue Tracking

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner Chrome

Published Sep 23, 2024

Updated Sep 24, 2024

Reserved Sep 23, 2024

Link CVE-2023-7281

CISA Vulnrichment

Updated Sep 24, 2024

NVD

Status Analyzed

Modified Jun 17, 2026

Link CVE-2023-7281

Red Hat

No data

ENISA EUVD

Assigner Chrome

Published Sep 23, 2024

Updated Sep 24, 2024

Link EUVD-2023-59664

GitHub

No data