VULNERABILITY INTELLIGENCE

CVE-2023-0140

CVSS score6.5 MEDIUM

EPSS probability0.60%

CISA KEVNot currently listed

Published2023-01-10

Last modified2026-06-17

Description

Inappropriate implementation in in File System API in Google Chrome on Windows prior to 109.0.5414.74 allowed a remote attacker to bypass file system restrictions via a crafted HTML page. (Chromium security severity: Low)