CVE-2015-6583 — Google Chrome vulnerability

CWE-2543 documents3 sources
Severity
4.3MEDIUMNVD
EPSS
0.4%
top 42.25%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Google Chrome
Timeline
PublishedSep 3
Latest updateMay 17

Description

Google Chrome before 45.0.2454.85 does not display a location bar for a hosted app's window after navigation away from the installation site, which might make it easier for remote attackers to spoof content via a crafted app, related to browser.cc and hosted_app_browser_controller.cc.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages1 packages

▶NVDgoogle/chrome44.0.2403

🔴Vulnerability Details

2
GHSA
GHSA-rxr5-hhj9-3w9v: Google Chrome before 45↗2022-05-17
▶
OSV
CVE-2015-6583: Google Chrome before 45↗2015-09-03
▶