First published: Tue Nov 30 2021(Updated: )
Inappropriate implementation in Autofill in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to potentially spoof the contents of the omnibox via a crafted HTML page. (Chromium security severity: Medium)
Credit: chrome-cve-admin@google.com Kirtikumar Anandrao Ramchandani via Yan Zhu Brave
Affected Software | Affected Version | How to fix |
---|---|---|
Google Chrome | <111.0.5563.64 | |
Google Android | ||
Google Chrome | <111.0.5563.64 | 111.0.5563.64 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)
CVE-2023-1231 has a medium severity rating as classified by Chromium security.
To fix CVE-2023-1231, update Google Chrome on Android to version 111.0.5563.64 or later.
Users of Google Chrome on Android prior to version 111.0.5563.64 are affected by CVE-2023-1231.
An attacker can potentially spoof the contents of the omnibox by exploiting CVE-2023-1231 through a crafted HTML page.
CVE-2023-1231 was disclosed in March 2023 following a stable channel update for Google Chrome.