Skip to content
Not rated

CVE-2023-1221 Insufficient policy enforcement in Extensions API in Google Chrome prior to 111.0.5563.64 allowed an attacker who…

Description

Insufficient policy enforcement in Extensions API in Google Chrome prior to 111.0.5563.64 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension. (Chromium security severity: Medium)

Affected products and versions

Product Affected versions Fixed in
Chrome 111.0 earliest → < 111.0.5563.64 111.0.5563.64
The 6072 CVEs of Chrome →
Track this CVE