Lucene search
Ubuntu.comUB:CVE-2023-5859HistoryNov 01, 2023 - 12:00 a.m.
CVE-2023-5859
2023-11-0100:00:00
ubuntu.com
ubuntu.com
16
google chrome
security ui
domain spoofing
html page
remote attack
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
AI Score
6
Confidence
High
EPSS
0.002
Percentile
58.6%
Incorrect security UI in Picture In Picture in Google Chrome prior to
119.0.6045.105 allowed a remote attacker to perform domain spoofing via a
crafted local HTML page. (Chromium security severity: Low)
Notes
| Author | Note |
|---|---|
| alexmurray | The Debian chromium source package is called chromium-browser in Ubuntu |
| mdeslaur | starting with Ubuntu 19.10, the chromium-browser package is just a script that installs the Chromium snap |
References
Related
cvelist
cvelist
CVE-2023-5859
2023-11-01 17:14:03
veracode
veracode
Domain Spoofing
2023-11-02 18:39:29
nvd
nvd
CVE-2023-5859
2023-11-01 18:15:10
debiancve
debiancve
CVE-2023-5859
2023-11-01 18:15:10
mscve
mscve
Chromium: CVE-2023-5859 Incorrect security UI in Picture In Picture
2023-11-02 07:00:00
osv
osv
CVE-2023-5859
2023-11-01 18:15:10
chromium - security update
2023-11-02 00:00:00
ungoogled-chromium-119.0.6045.123-1.1 on GA media
2024-06-15 00:00:00
cve
cve
CVE-2023-5859
2023-11-01 18:15:10
prion
prion
Code injection
2023-11-01 18:15:00
fedora
fedora
[SECURITY] Fedora 37 Update: chromium-119.0.6045.105-1.fc37
2023-11-08 01:21:21
[SECURITY] Fedora 38 Update: chromium-119.0.6045.123-1.fc38
2023-11-14 01:57:57
[SECURITY] Fedora 39 Update: chromium-119.0.6045.123-1.fc39
2023-11-14 01:48:12
openvas
openvas
debian
debian
[SECURITY] [DSA 5546-1] chromium security update
2023-11-03 15:57:32
freebsd
freebsd
chromium -- multiple vulnerabilities
2023-10-31 00:00:00
nessus
nessus
FreeBSD : chromium -- multiple vulnerabilities (a1e27775-7a61-11ee-8290-a8a1599412c6)
2023-11-03 00:00:00
openSUSE 15 Security Update : chromium (openSUSE-SU-2023:0368-1)
2023-11-15 00:00:00
Fedora 39 : chromium (2023-f83b5e84d3)
2023-11-13 00:00:00
mageia
mageia
Updated chromium-browser-stable packages fix bugs and vulnerabilities
2023-11-20 13:04:11
chrome
chrome
Stable Channel Update for Desktop
2023-10-31 00:00:00
kaspersky
kaspersky
KLA61868 Multiple vulnerabilities in Microsoft Browser
2023-11-02 00:00:00
KLA61760 Multiple vulnerabilities in Google Chrome
2023-10-31 00:00:00
redos
redos
ROS-20240329-07
2024-03-29 00:00:00
gentoo
gentoo
QtWebEngine: Multiple Vulnerabilities
2023-12-22 00:00:00
QtWebEngine: Multiple Vulnerabilities
2023-11-25 00:00:00
Chromium, Google Chrome, Microsoft Edge: Multiple Vulnerabilities
2024-01-31 00:00:00
rapid7blog
rapid7blog
Patch Tuesday - November 2023
2023-11-14 21:27:09
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
AI Score
6
Confidence
High
EPSS
0.002
Percentile
58.6%
Related for UB:CVE-2023-5859