CVE-2019-13660

Description

UI spoofing in Chromium in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to spoof notifications via a crafted HTML page.

Risk Information

Base Score
5.3
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
EPSS Score
Exploitation Probability
0.226

Associated Vulnerability

VulnerabilityOS Platform
Multiple vulnerabilities fixed in Google Chrome (77.0.3865.75)Windows
Multiple vulnerabilities fixed in Google Chrome (x64) (77.0.3865.75)Windows
Multiple vulnerabilities are fixed in Google Chrome for Mac 77.0.3865.75Mac
(RHSA-2019:3211) chromium-browser security update chromium-browser-77.0.3865.120-2.el6_10.i686.rpmLinux
(RHSA-2019:3211) chromium-browser security update chromium-browser-77.0.3865.120-2.el6_10.x86_64.rpmLinux
chromium security update(DSA-4562-1) chromium_78.0.3904.97-1~deb10u1_amd64.debLinux
Multiple vulnerabilities fixed in Google Chrome (77.0.3865.75) (For Debian)Linux
Multiple vulnerabilities fixed in Google Chrome (77.0.3865.75) (For Centos)Linux
Multiple vulnerabilities fixed in Google Chrome (77.0.3865.75) (For RedHat)Linux
Multiple vulnerabilities fixed in Google Chrome (77.0.3865.75) (For Suse)Linux
Multiple vulnerabilities fixed in Google Chrome (77.0.3865.75) (For Ubuntu)Linux

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-310907Google Chrome (77.0.3865.75)
PATCH-310908Google Chrome (x64) (77.0.3865.75)
PATCH-611995Google Chrome for Mac (140.0.7339.132 , 140.0.7339.133)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234