CVE Catalog
CVE-2023-3733
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk0.57%
43th percentile - higher than 43% of all known CVEs
Summary
Inappropriate implementation in WebApp Installs in Google Chrome prior to version 115.0.5790.98 allowed a remote attacker to potentially spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
Risk Assessment
An attacker could mislead users by presenting false information in the address bar, potentially leading to fraud or data theft.
Recommendation
It is recommended to update Google Chrome to the latest version to mitigate the risk associated with this vulnerability.
Original NVD description (English source)
Inappropriate implementation in WebApp Installs in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to potentially spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Medium)