CVE-2021-30596

Description

Incorrect security UI in Navigation in Google Chrome on Android prior to 92.0.4515.131 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.

Risk Information

Base Score
4.3
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
EPSS Score
Exploitation Probability
0.204

Associated Vulnerability

VulnerabilityOS Platform
Multiple vulnerabilities fixed in Google Chrome (92.0.4515.131)Windows
Multiple vulnerabilities fixed in Google Chrome (x64) (92.0.4515.131)Windows
Multiple vulnerabilities fixed in Microsoft Edge for chromium business (x64) (92.0.902.67)Windows
Multiple vulnerabilities fixed in Microsoft Edge for chromium business (92.0.902.67)Windows
Multiple vulnerabilities are fixed in Google Chrome For Mac 92.0.4515.131Mac

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-320818Google Chrome (92.0.4515.131)
PATCH-320819Google Chrome (x64) (92.0.4515.131)
PATCH-109332Microsoft Edge for chromium business (99.0.1150.30) (x64)
PATCH-109333Microsoft Edge for chromium business (99.0.1150.30) (x86)
PATCH-609673Google Chrome for Mac (132.0.6834.83, 132.0.6834.84)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234