CVE-2023-1816: Incorrect security UI in Picture In Picture

Reference Links

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-1816 (Advisory)
• https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop.html (Advisory)
• https://crbug.com/1413919
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/
• https://security.gentoo.org/glsa/202309-17
• https://www.debian.org/security/2023/dsa-5386
• https://security-tracker.debian.org/tracker/CVE-2023-1816

Parent vulnerabilities

(Appears in the following advisories)

• 7031734922496241117

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2023-1810
• CVE-2023-1811
• CVE-2023-2313
• CVE-2023-1812
• CVE-2023-1813
• CVE-2023-1814
• CVE-2023-1815
• CVE-2023-1817
• CVE-2023-2311
• CVE-2023-1818
• CVE-2023-1819
• CVE-2023-1820
• CVE-2023-1821
• CVE-2023-1822
• CVE-2023-1823

Frequently Asked Questions

• What is the severity of CVE-2023-1816?

  CVE-2023-1816 has been assigned a severity rating that indicates a significant security risk for vulnerable versions of Chromium-based browsers.

• How do I fix CVE-2023-1816?

  To fix CVE-2023-1816, update your Chromium-based browser to the latest version provided by your vendor.

• Which software is affected by CVE-2023-1816?

  CVE-2023-1816 affects Google Chrome and Microsoft Edge based on the Chromium engine, specifically versions prior to their remediation updates.

• Is CVE-2023-1816 a remote code execution vulnerability?

  Yes, CVE-2023-1816 is categorized as a vulnerability that could potentially allow remote code execution.

• When was CVE-2023-1816 disclosed?

  CVE-2023-1816 was disclosed as a significant vulnerability impacting various browsers using the Chromium framework.