CVE-2023-3737: Inappropriate implementation in Notifications
Chromium: CVE-2023-3737 Inappropriate implementation in Notifications
Other sources
Inappropriate implementation in Notifications in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to spoof the contents of media notifications via a crafted HTML page. (Chromium security severity: Medium)
— MITRE
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Credit
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2023-3737?
CVE-2023-3737 has been classified as a high severity vulnerability.
How do I fix CVE-2023-3737?
To mitigate CVE-2023-3737, users should update to the latest versions of Microsoft Edge or Google Chrome that address this vulnerability.
What software is affected by CVE-2023-3737?
CVE-2023-3737 affects Microsoft Edge and Google Chrome versions prior to 115.0.1901.183 and 115.0.5790.98 respectively.
Who is responsible for addressing CVE-2023-3737?
The Chromium development team is responsible for addressing CVE-2023-3737 as part of their regular updates.
What is the impact of CVE-2023-3737 on users?
CVE-2023-3737 could allow unauthorized actions, potentially compromising user security and privacy if left unaddressed.