Security Advisory

CVE-2023-1233

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-03-07 21:42:19

Last updated 2024-10-10 19:21:53

Assigner Chrome

State PUBLISHED

Description

Insufficient policy enforcement in Resource Timing in Google Chrome prior to 111.0.5563.64 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from API via a crafted Chrome Extension. (Chromium security severity: Low)

← Browse all CVEs View on cve.org ↗