CVE-2023-2940: Inappropriate implementation in Downloads
Chromium: CVE-2023-2940 Inappropriate implementation in Downloads
Other sources
Inappropriate implementation in Downloads in Google Chrome prior to 114.0.5735.90 allowed an attacker who convinced a user to install a malicious extension to bypass file access restrictions via a crafted HTML page. (Chromium security severity: Medium)
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Credit
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2023-2940?
CVE-2023-2940 has a severity rating that indicates a moderate risk of exploitation.
How do I fix CVE-2023-2940?
To fix CVE-2023-2940, update your Chromium-based browser to the latest version available.
Which software versions are affected by CVE-2023-2940?
CVE-2023-2940 affects versions of Chromium and Chrome prior to version 115 and Microsoft Edge (Chromium-based) versions before certain updates.
Is Microsoft Edge vulnerable to CVE-2023-2940?
Yes, Microsoft Edge (Chromium-based) is potentially vulnerable to CVE-2023-2940 if not updated to the appropriate version.
Where can I find more information about CVE-2023-2940?
More information regarding CVE-2023-2940 can typically be found in security updates from browser vendors.