← Back to browse · API

CVE-2023-4357

Severity
HIGH
CVSS
8.8
EPSS
0.45912
Risk score
51.27
CISA KEV
No
PoC
No
Published
2023-08-15
Modified
2025-02-13
First seen
2026-08-07
Aliases
EUVD-2023-54221, GHSA-6CX7-2M7Q-5FH3
Products
Google:Chrome 116.0.5845.96 <116.0.5845.96
Sources
euvd EUVD-2023-54221

Description

Insufficient validation of untrusted input in XML in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to bypass file access restrictions via a crafted HTML page. (Chromium security severity: Medium)

References