PT-2023-7510

CVE-2023-6512

·

Published

2023-06-24

·

Updated

2024-11-29

Description by

CVSS 3.1
6.5
Medium
MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 120.0.6099.62
Description The issue is related to an inappropriate implementation in the Web Browser UI, allowing a remote attacker to potentially spoof the contents of an iframe dialog context menu via a crafted HTML page. This could be exploited by a remote attacker using a specially crafted HTML page.
Recommendations For Google Chrome versions prior to 120.0.6099.62, update to version 120.0.6099.62 or later to resolve the issue. As a temporary workaround, consider restricting the use of iframe dialog context menus until a patch is applied.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
ALT-PU-2023-8370
ALT-PU-2024-10294
ALT-PU-2024-14286
ALT-PU-2024-14830
DSA-5573-1
MGASA-2023-0355
OPENSUSE-SU-2024:0020-1
OPENSUSE-SU-2024:13583-1
OPENSUSE-SU-2024:13585-1
Found an issue in the description? Have something to add? Feel free to write us 👾