Security Advisory

CVE-2023-2941

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-05-30 21:31:41
Last updated 2025-03-11 16:21:45
Assigner Chrome
State PUBLISHED

Description

Inappropriate implementation in Extensions API in Google Chrome prior to 114.0.5735.90 allowed an attacker who convinced a user to install a malicious extension to spoof the contents of the UI via a crafted Chrome Extension. (Chromium security severity: Low)