CVE-2023-2460

—

CVSS 3.1

7.1 high

EPSS

<1%p51

Published

May 3, 2023 (May 3, 2023)

Modified

Jun 17, 2026

Description

Insufficient validation of untrusted input in Extensions in Google Chrome prior to 113.0.5672.63 allowed an attacker who convinced a user to install a malicious extension to bypass file access checks via a crafted HTML page. (Chromium security severity: Medium)

Vendors: google debian fedoraproject
Products: chrome, debian linux, fedora
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.