VULNERABILITY INTELLIGENCE

CVE-2023-7281

CVSS score4.3 MEDIUM

EPSS probability0.24%

CISA KEVNot currently listed

Published2024-09-23

Last modified2026-06-17

Description

Inappropriate implementation in Compositing in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)