CVE-2023-4350

Inappropriate implementation in Fullscreen in Google Chrome on Android prior to 116.0.5845.96 allowed a remote attacker to potentially spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: High)

CVSS v3.1

6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

EPSS

0.87% chance of exploitation in the next 30 days, 56th percentile

Published

2023-08-15

Updated

2025-02-13

Proof-of-concept exploits (1)

• 0nyx-hkr/cve-2023-43500★ · 2023-09-11

References

• CVE Record
• NVD entry

Related

• CVE-2023-43494
• CVE-2023-4357
• CVE-2023-43491
• CVE-2023-43608
• CVE-2023-43482
• CVE-2023-43622