CVE-2023-4359

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-4359
Inappropriate implementation in App Launcher in Google Chrome on iOS prior to 116.0.5845.96 allowed a remote attacker to potentially spoof elements of the security UI via a crafted HTML page. (Chromium security severity: Medium)

5.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://chromereleases.googleblog.com/2023/08/stable-channel-update-for-desktop_15.html Release Notes Third Party Advisory
https://crbug.com/1443722 Permissions Required
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2DMXHPRUGBUDNHZCZCIVMWAUIEXEGMGT/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OCFEK63FUHFXZH5MSG6TNQOXMQWM4M5S/ Mailing List Third Party Advisory
https://security.gentoo.org/glsa/202401-34
https://www.debian.org/security/2023/dsa-5479 Mailing List Third Party Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:-:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*
History

31 Jan 2024, 17:15

Type Values Removed Values Added
References
  • () https://security.gentoo.org/glsa/202401-34 -

27 Aug 2023, 03:15

Type Values Removed Values Added
References
  • (MISC) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2DMXHPRUGBUDNHZCZCIVMWAUIEXEGMGT/ -

24 Aug 2023, 04:51

Type Values Removed Values Added
CWE NVD-CWE-noinfo
References (MISC) https://crbug.com/1443722 - (MISC) https://crbug.com/1443722 - Permissions Required
References (MISC) https://chromereleases.googleblog.com/2023/08/stable-channel-update-for-desktop_15.html - (MISC) https://chromereleases.googleblog.com/2023/08/stable-channel-update-for-desktop_15.html - Release Notes, Third Party Advisory
References (MISC) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OCFEK63FUHFXZH5MSG6TNQOXMQWM4M5S/ - (MISC) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OCFEK63FUHFXZH5MSG6TNQOXMQWM4M5S/ - Mailing List, Third Party Advisory
References (MISC) https://www.debian.org/security/2023/dsa-5479 - (MISC) https://www.debian.org/security/2023/dsa-5479 - Mailing List, Third Party Advisory
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.3
CPE cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:-:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
First Time Fedoraproject
Apple
Debian
Fedoraproject fedora
Apple iphone Os
Debian debian Linux
Google chrome
Google

20 Aug 2023, 03:15

Type Values Removed Values Added
References
  • (MISC) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OCFEK63FUHFXZH5MSG6TNQOXMQWM4M5S/ -

18 Aug 2023, 04:15

Type Values Removed Values Added
References
  • (MISC) https://www.debian.org/security/2023/dsa-5479 -

15 Aug 2023, 18:23

Type Values Removed Values Added
New CVE
Information

Published : 2023-08-15 18:15

Updated : 2024-01-31 17:15

NVD link : CVE-2023-4359

Mitre link : CVE-2023-4359

CVE.ORG link : CVE-2023-4359

JSON object : View

Products Affected

debian

  • debian_linux

apple

  • iphone_os

google

  • chrome

fedoraproject

  • fedora
CWE
NVD-CWE-noinfo