CVE-2023-3736: Inappropriate implementation in Custom Tabs
Chromium: CVE-2023-3736 Inappropriate implementation in Custom Tabs
Other sources
Inappropriate implementation in Custom Tabs in Google Chrome on Android prior to 115.0.5790.98 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Credit
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2023-3736?
CVE-2023-3736 has a severity level that indicates it poses a potential risk to users of Microsoft Edge and Google Chrome.
How do I fix CVE-2023-3736?
To fix CVE-2023-3736, update Microsoft Edge to version 115.0.1901.183 or Google Chrome to version 115.0.5790.98.
Which versions of Microsoft Edge are affected by CVE-2023-3736?
CVE-2023-3736 affects Microsoft Edge versions prior to 115.0.1901.183.
Which versions of Google Chrome are affected by CVE-2023-3736?
CVE-2023-3736 affects Google Chrome versions prior to 115.0.5790.98.
Is CVE-2023-3736 a vulnerability in only Microsoft Edge?
No, CVE-2023-3736 affects both Microsoft Edge and Google Chrome as they share the Chromium base.