CVE-2023-5859

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 119.0.6045.105

Description The issue is related to incorrect security UI in the Picture-in-Picture (PiP) feature of Google Chrome, allowing a remote attacker to perform domain spoofing via a crafted local HTML page. This can lead to spoofing attacks.

Recommendations For versions prior to 119.0.6045.105, update to version 119.0.6045.105 or later to resolve the issue. As a temporary workaround, consider disabling the Picture-in-Picture feature until a patch is available. Restrict access to crafted local HTML pages to minimize the risk of exploitation.