vulnerability
Microsoft Edge Chromium: CVE-2023-2460 Insufficient validation of untrusted input in Extensions
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 8 | (AV:N/AC:M/Au:N/C:C/I:P/A:N) | May 3, 2023 | May 8, 2023 | Jan 28, 2025 |
Severity
8
CVSS
(AV:N/AC:M/Au:N/C:C/I:P/A:N)
Published
May 3, 2023
Added
May 8, 2023
Modified
Jan 28, 2025
Description
Insufficient validation of untrusted input in Extensions in Google Chrome prior to 113.0.5672.63 allowed an attacker who convinced a user to install a malicious extension to bypass file access checks via a crafted HTML page. (Chromium security severity: Medium)
Solution
microsoft-edge-upgrade-latest
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.