CVE-2023-5475

Summary

CVE-2023-5475 is a medium severity vulnerability affecting Google Chrome's DevTools prior to version 118.0.5993.70. An attacker could exploit this inappropriate implementation by convincing a user to install a malicious extension, thereby bypassing discretionary access control. This issue grants unintended privileges to the malicious extension, potentially leading to sensitive information disclosure or other malicious activities.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.