CVE-2023-7011

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 119.0.6045.105

Description The issue is related to the Picture in Picture technology in Google Chrome, where a remote attacker can exploit it to spoof the contents of the URL bar using a specially crafted HTML page. This can lead to the distortion of important information in the user interface.

Recommendations For versions prior to 119.0.6045.105, update to version 119.0.6045.105 or later to resolve the issue. As a temporary workaround, consider restricting the use of the Picture in Picture feature until a patch is applied. Avoid using specially crafted HTML pages that can exploit this issue.