cbcvebase.
CVE-2023-7281
published 2024-09-23

CVE-2023-7281: Inappropriate implementation in Compositing in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to perform UI spoofing via a crafted HTML page…

PriorityP418medium4.3CVSS 3.1
AVNACLPRNUIRSUCNILAN
EPSS
0.23%
14.0th percentile
Inappropriate implementation in Compositing in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

Affected

7 ranges
VendorProductVersion rangeFixed in
chromiumchromium>= 0 < 119.0.6045.105-1~deb11u1119.0.6045.105-1~deb11u1
chromiumchromium>= 0 < 119.0.6045.105-1~deb12u1119.0.6045.105-1~deb12u1
chromiumchromium>= 0 < 119.0.6045.105-1119.0.6045.105-1
chromiumchromium>= 0 < 119.0.6045.105-1119.0.6045.105-1
debianchromium< chromium 119.0.6045.105-1~deb12u1 (bookworm)chromium 119.0.6045.105-1~deb12u1 (bookworm)
googlechrome< 119.0.6045.105119.0.6045.105
googlechrome>= 119.0.6045.105 < 119.0.6045.105119.0.6045.105

CVSS provenance

nvdv3.14.3MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
osv4.3MEDIUM
vendor_debian4.3MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.