CVE-2023-2941: Inappropriate implementation in Extensions API
Chromium: CVE-2023-2941 Inappropriate implementation in Extensions API
Other sources
Inappropriate implementation in Extensions API in Google Chrome prior to 114.0.5735.90 allowed an attacker who convinced a user to install a malicious extension to spoof the contents of the UI via a crafted Chrome Extension. (Chromium security severity: Low)
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Credit
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2023-2941?
CVE-2023-2941 has been classified as a moderate vulnerability that could affect user privacy and security.
How do I fix CVE-2023-2941?
To fix CVE-2023-2941, update your Microsoft Edge (Chromium-based) or Google Chrome to the latest version, specifically 114.0.5735.90 or newer.
Which versions are affected by CVE-2023-2941?
CVE-2023-2941 affects Google Chrome versions prior to 114.0.5735.90 and Microsoft Edge Chromium versions prior to 114.0.1823.37.
Who is impacted by CVE-2023-2941?
Users of Google Chrome and Microsoft Edge running affected versions are at risk from CVE-2023-2941.
What kind of vulnerability is CVE-2023-2941?
CVE-2023-2941 is classified as an inappropriate implementation vulnerability that may lead to security issues.