CVE-2023-4357

HighCVSS 8.8

Published: 15/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

45.91%

99th percentile - higher than 99% of all known CVEs

Summary

Insufficient validation of untrusted input in XML in Google Chrome prior to version 116.0.5845.96 allowed a remote attacker to bypass file access restrictions via a crafted HTML page.

Risk Assessment

An attacker could gain access to files they should not have access to, potentially leading to the exposure of sensitive data.

Recommendation

It is recommended to update Google Chrome to the latest version to mitigate the risk associated with this vulnerability.

Original NVD description (English source)

Insufficient validation of untrusted input in XML in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to bypass file access restrictions via a crafted HTML page. (Chromium security severity: Medium)