CVE-2023-5487

CVSS 3.1 Score 6.5 of 10 (medium)

Details

Published Oct 11, 2023
Updated: Jan 31, 2024

Summary

CVE-2023-5487 is a cyber vulnerability that affects Google Chrome versions prior to 118.0.5993.70. It involves an inappropriate implementation in Fullscreen, which allows an attacker to bypass navigation restrictions by convincing a user to install a malicious Chrome Extension. The severity of this vulnerability is rated as "Medium" by Chromium security. The potential danger it poses to an organization includes high integrity impact, but no confidentiality impact. The base score for this vulnerability is 6.5 out of 10, indicating a medium-severity issue. Remediation for this vulnerability involves updating Google Chrome to version 118.0.5993.70 or later, which addresses the inappropriate implementation issue in Fullscreen and prevents the bypass of navigation restrictions through malicious extensions.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-5487 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options