CVE-2023-0139: Insufficient validation of untrusted input in Downloads
Insufficient validation of untrusted input in Downloads in Google Chrome on Windows prior to 109.0.5414.74 allowed a remote attacker to bypass download restrictions via a crafted HTML page. (Chromium security severity: Low)
Credit
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2023-0139.
What is the severity of CVE-2023-0139?
The severity of CVE-2023-0139 is medium.
What is the affected software for CVE-2023-0139?
The affected software for CVE-2023-0139 is Google Chrome on Windows prior to version 109.0.5414.74.
How can a remote attacker exploit CVE-2023-0139?
A remote attacker can exploit CVE-2023-0139 by bypassing download restrictions via a crafted HTML page.
Where can I find more information about CVE-2023-0139?
You can find more information about CVE-2023-0139 in the references: [Google Chrome Releases](https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html), [Chrome Bug Tracker](https://crbug.com/1367632), [Gentoo Security Advisory](https://security.gentoo.org/glsa/202305-10).