CVE-2023-4361

MediumCVSS 5.3

Published: 15/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.76%

51th percentile - higher than 51% of all known CVEs

Summary

Inappropriate implementation in Autofill in Google Chrome on Android prior to version 116.0.5845.96 allowed a remote attacker to bypass Autofill restrictions via a crafted HTML page.

Risk Assessment

An attacker could exploit this vulnerability to steal personal data from users, posing a significant threat to information security.

Recommendation

It is recommended to update Google Chrome to the latest version to mitigate this vulnerability.

Original NVD description (English source)

Inappropriate implementation in Autofill in Google Chrome on Android prior to 116.0.5845.96 allowed a remote attacker to bypass Autofill restrictions via a crafted HTML page. (Chromium security severity: Medium)