First published: Thu Oct 10 2019(Updated: )
Insufficient policy enforcement in Web Payments API in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Medium)
Credit: chrome-cve-admin@google.com Anonymous
Affected Software | Affected Version | How to fix |
---|---|---|
Google Chrome | <111.0.5563.64 | |
Google Chrome | <111.0.5563.64 | 111.0.5563.64 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)
CVE-2023-1226 has a medium severity rating as per Chromium security assessment.
To fix CVE-2023-1226, update Google Chrome to version 111.0.5563.64 or later.
CVE-2023-1226 is caused by insufficient policy enforcement in the Web Payments API.
Google Chrome versions prior to 111.0.5563.64 are affected by CVE-2023-1226.
Yes, CVE-2023-1226 allows remote attackers to bypass content security policy through a crafted HTML page.