CVE-2023-3735: Inappropriate implementation in Web API Permission Prompts
Chromium: CVE-2023-3735 Inappropriate implementation in Web API Permission Prompts
Other sources
Inappropriate implementation in Web API Permission Prompts in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to obfuscate security UI via a crafted HTML page. (Chromium security severity: Medium)
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Credit
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2023-3735?
CVE-2023-3735 has been categorized with a high severity rating due to its potential impact.
How do I fix CVE-2023-3735?
To fix CVE-2023-3735, users should update Microsoft Edge to version 115.0.1901.183 or Google Chrome to version 115.0.5790.98.
Which software is affected by CVE-2023-3735?
CVE-2023-3735 affects Microsoft Edge (Chromium-based) versions prior to 115.0.1901.183 and Google Chrome versions prior to 115.0.5790.98.
When was CVE-2023-3735 disclosed?
CVE-2023-3735 was disclosed in July 2023 as part of routine security updates.
What types of vulnerabilities are associated with CVE-2023-3735?
CVE-2023-3735 is associated with inappropriate implementation issues in the affected browsers.