CVE-2023-5477

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 118.0.5993.70

Description The issue is related to an inappropriate implementation in the Installer component of Google Chrome, which allowed a local attacker to bypass discretionary access control via a crafted command. This could potentially enable an attacker to circumvent existing security restrictions. The vulnerability is related to incorrectly implemented security checks for standard elements, and exploitation may allow a remote attacker to bypass security restrictions using a specially crafted HTML page.

Recommendations For Google Chrome versions prior to 118.0.5993.70, update to version 118.0.5993.70 or later to resolve the issue. As a temporary workaround, consider restricting access to the Installer component until a patch is available. Avoid using the Installer component with crafted commands until the issue is resolved.