CVE-2023-0697
Inappropriate implementation in Full screen mode in Google Chrome on Android prior to 110.0.5481...
6.5 MediumFix available
Inappropriate implementation in Full screen mode in Google Chrome on Android prior to 110.0.5481.77 allowed a remote attacker to spoof the contents of the security UI via a crafted HTML page. (Chromium security severity: High)
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- High
- Availability
- None
Exploit likelihood
0.51%Down 0.5 points since Feb 8, 2023
What each source reports
NVD Score used
Inappropriate implementation in Full screen mode in Google Chrome on Android prior to 110.0.5481.77 allowed a remote attacker to spoof the contents of the security UI via a crafted HTML page. (Chromium security severity: High)
- Record
CVE-2023-0697- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N - Updated
- 2026-11-02
CVE ListNo score
Inappropriate implementation in Full screen mode in Google Chrome on Android prior to 110.0.5481.77 allowed a remote attacker to spoof the contents of the security UI via a crafted HTML page. (Chromium security severity: High)
- Record
CVE-2023-0697- Updated
- 2026-11-02
EUVDEUVD-2023-12725No score
Inappropriate implementation in Full screen mode in Google Chrome on Android prior to 110.0.5481.77 allowed a remote attacker to spoof the contents of the security UI via a crafted HTML page. (Chromium security severity: High)
- Record
EUVD-2023-12725- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-fvx9-fxhf-8hqp
Inappropriate implementation in Full screen mode in Google Chrome on Android prior to 110.0.5481...
Inappropriate implementation in Full screen mode in Google Chrome on Android prior to 110.0.5481.77 allowed a remote attacker to spoof the contents of the security UI via a crafted HTML page. (Chromium security severity: High)
- Record
GHSA-fvx9-fxhf-8hqp- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N - Updated
- 2026-11-02
OSV
Inappropriate implementation in Full screen mode in Google Chrome on Android prior to 110.0.5481.77 allowed a remote attacker to spoof the contents of the security UI via a crafted HTML page. (Chromium security severity: High)
- Record
CVE-2023-0697- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N - Updated
- 2026-11-02
OSVDEBIAN-CVE-2023-0697
Inappropriate implementation in Full screen mode in Google Chrome on Android prior to 110.0.5481.77 allowed a remote attacker to spoof the contents of the security UI via a crafted HTML page. (Chromium security severity: High)
- Record
DEBIAN-CVE-2023-0697- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N - Updated
- 2026-11-02
Show 5 moreShow less
OSVopenSUSE-SU-2023:0045-1No score
Security update for chromium
This update for chromium fixes the following issues:
Chromium 110.0.5481.77 (boo#1208029):
- CVE-2023-0696: Type Confusion in V8
- CVE-2023-0697: Inappropriate implementation in Full screen mode
- CVE-2023-0698: Out of bounds read in WebRTC
- CVE-2023-0699: Use after free in GPU
- CVE-2023-0700: Inappropriate implementation in Download
- CVE-2023-0701: Heap buffer overflow in WebUI
- CVE-2023-0702: Type Confusion in Data Transfer
- CVE-2023-0703: Type Confusion in DevTools
- CVE-2023-0704: Insufficient policy enforcement in DevTools
- CVE-2023-0705: Integer overflow in Core
- Various fixes from internal audits, fuzzing and other initiatives
- build with bundled libavif
- Record
openSUSE-SU-2023:0045-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2023:0063-1No score
Security update for opera
This update for opera fixes the following issues:
Update to 96.0.4693.20
- CHR-9191 Update Chromium on desktop-stable-110-4693 to 110.0.5481.78
- CHR-9197 Update Chromium on desktop-stable-110-4693 to 110.0.5481.100
- DNA-105308 Translations for O96
- DNA-105395 Fix missing resources errors on About and Update & Recovery pages
Complete Opera 96.0 changelog at: https://blogs.opera.com/desktop/changelog-for-96/
The update to chromium 110.0.5481.78 fixes following issues: CVE-2023-0696, CVE-2023-0697, CVE-2023-0698, CVE-2023-0699, CVE-2023-0700, CVE-2023-0701, CVE-2023-0702, CVE-2023-0703, CVE-2023-0704, CVE-2023-0705
Update to 95.0.4635.46
- DNA-104601 Crash at opera::EasyShareButtonControllerTabHelper::StartOnboarding()
- DNA-104936 Set new Baidu search string
- DNA-105084 Prepare to turning on 'Rich entities'
Update to 95.0.4635.37
- DNA-104366 Turn #speed-dial-custom-image on developer
- DNA-104370 Pictures in news don’t show
- DNA-104384 [News] Change News to be disabled by default
- DNA-104393 [Continue on] Weird look of item counter in collapsed Continue shopping after refreshing page
- DNA-104394 [Continue on] Continue shopping show up collapsed
- DNA-104421 Mechanism to detect installed player
- DNA-104439 Merge with GX implementation
- DNA-104492 [Stable A/B Test] React Start Page for Austria 50%
- DNA-104523 [Add to Opera][Folders][Edit] Black font on dark background in modals when light theme with dark wallpaper is selected
- DNA-104525 [Choose language and country] Modal does not adapt when wallpaper does not match theme
- DNA-104609 [SD][Folders] Incorrect order of tiles in folder when merging folder with single tile
- DNA-104612 [News] Invisible button in news category.
- DNA-104614 Do not allow to create folder with the same name to prevent automerging
- DNA-104898 [Edit tile] Adjust icon size of tile in edit-form-modal
- Record
openSUSE-SU-2023:0063-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2023:0115-1No score
Security update for opera
This update for opera fixes the following issues:
Update to 99.0.4788.13
- CHR-9290 Update Chromium on desktop-stable-113-4788 to 113.0.5672.127
- DNA-107317 __delayLoadHelper2 crash in crashreporter
The update to chromium 113.0.5672.127 fixes following issues: CVE-2023-2721, CVE-2023-2722, CVE-2023-2723, CVE-2023-2724, CVE-2023-2725, CVE-2023-2726
Update to 99.0.4788.9
- CHR-9283 Update Chromium on desktop-stable-113-4788 to 113.0.5672.93
- DNA-107638 Translations for O99
- DNA-107678 Crash Report [@ BrowserContextKeyedServiceFactory:: BrowserContextKeyedServiceFactory(char const*, BrowserContextDependencyManager*) ]
- DNA-107795 Fix wrong german translation of 'Close All Duplicate Tabs'
- DNA-107800 Fonts on section#folder and AddSitePanel not readable when animated wallpaper chosen
- DNA-107840 Promote O99 to stable
Update to 98.0.4759.39
- DNA-102363 ChromeFileSystemAccessPermissionContextTest. ConfirmSensitiveEntryAccess_DangerousFile fails
- DNA-105534 [Add to Opera] Incorrect scroll on modal when browser window size is too small
- DNA-106649 Opening new tab when pinned tab is active gives 2 active tabs
- DNA-107226 Speed Dial freezes and empty space remains after Continue booking tile dragging
- DNA-107435 Building archive_source_release target fails
- DNA-107441 [Start page] Right mouse click on tile in continue on section opens target site in current tab
- DNA-107508 Crash at permissions::PermissionRecoverySuccessRate Tracker::TrackUsage(ContentSettingsType)
- DNA-107528 Handle real-time SD impression reporting
- DNA-107546 Context menus broken with one workspace
- DNA-107548 Paste from Context Menu doesn’t work for Search on StartPage
- DNA-107560 Optimize real-time SD impression reporting
- Record
openSUSE-SU-2023:0115-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:12675-1No score
chromedriver-110.0.5481.77-1.1 on GA media
These are all security issues fixed in the chromedriver-110.0.5481.77-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:12675-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:12948-1No score
ungoogled-chromium-113.0.5672.92-1.1 on GA media
These are all security issues fixed in the ungoogled-chromium-113.0.5672.92-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:12948-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
chromiumDebian:12 | before 110.0.5481.77-1 | 110.0.5481.77-1 |
chromiumDebian:13 | before 110.0.5481.77-1 | 110.0.5481.77-1 |
chromiumDebian:14 | before 110.0.5481.77-1 | 110.0.5481.77-1 |
chromiumDebian:11 From an advisory covering 10 CVEs | before 110.0.5481.77-1~deb11u1, plus listed versions 100.0.4896.127-1100.0.4896.127-1~deb11u1100.0.4896.60-1100.0.4896.60-1~deb11u1100.0.4896.75-1 Show 45 moreShow less100.0.4896.75-1~deb11u1100.0.4896.88-1100.0.4896.88-1~deb11u1101.0.4951.41-1101.0.4951.41-1~deb11u1101.0.4951.41-2101.0.4951.54-1101.0.4951.64-1101.0.4951.64-1~deb11u1102.0.5005.115-1102.0.5005.115-1~deb11u1102.0.5005.61-1102.0.5005.61-1~deb11u1103.0.5060.114-1103.0.5060.114-1~deb11u1103.0.5060.134-1103.0.5060.134-1~deb11u1103.0.5060.53-1103.0.5060.53-1~deb11u1104.0.5112.101-1104.0.5112.101-1~deb11u1104.0.5112.79-1104.0.5112.79-1~deb11u1105.0.5195.102-1105.0.5195.102-1~deb11u1105.0.5195.125-1105.0.5195.125-1~deb11u1105.0.5195.52-1105.0.5195.52-1~deb11u1106.0.5249.103-1106.0.5249.103-2106.0.5249.119-1106.0.5249.119-1~deb11u1106.0.5249.61-1106.0.5249.61-1~deb11u1106.0.5249.91-1106.0.5249.91-1~deb11u1107.0.5304.110-1107.0.5304.110-1~deb11u1107.0.5304.110-2107.0.5304.121-1107.0.5304.121-1~deb11u1107.0.5304.68-1107.0.5304.68-1~deb11u1107.0.5304.87-1 | 110.0.5481.77-1~deb11u1 |
chromiumSUSE:Package Hub 15 SP4 From an advisory covering 10 CVEs | before 110.0.5481.77-bp154.2.67.1 | 110.0.5481.77-bp154.2.67.1 |
chromiumopenSUSE:Leap 15.4 From an advisory covering 10 CVEs | before 110.0.5481.77-bp154.2.67.1 | 110.0.5481.77-bp154.2.67.1 |
operaopenSUSE:Leap 15.4 NonFree From an advisory covering 10 CVEs | before 96.0.4693.20-lp154.2.41.1 | 96.0.4693.20-lp154.2.41.1 |
operaopenSUSE:Leap 15.5 NonFree From an advisory covering 89 CVEs | before 99.0.4788.13-lp155.3.6.1 | 99.0.4788.13-lp155.3.6.1 |
chromiumopenSUSE:Tumbleweed From an advisory covering 10 CVEs | before 110.0.5481.77-1.1 | 110.0.5481.77-1.1 |
chromiumopenSUSE:Tumbleweed From an advisory covering 2310 CVEs | before 113.0.5672.92-1.1 | 113.0.5672.92-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-0697 is a medium vulnerability (CVSS 6.5) in Google Chrome, published February 7, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.51%, the 44th percentile. Fixed in chromium 110.0.5481.77-1.
References
chromereleases.googleblog.com/2023/02/stable-channel-update-for-desktop.html
crbug.com/1341541
security.gentoo.org/glsa/202309-17
nvd.nist.gov/vuln/detail/CVE-2023-0697
github.com/advisories/GHSA-fvx9-fxhf-8hqp
security-tracker.debian.org/tracker/CVE-2023-0697
Show 194 moreShow less
lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2ZUPRNYY3OQIIYHF4EDZBQMHP655Z7MA
bugzilla.suse.com/1208029
suse.com/security/cve/CVE-2023-0696
This page doesn't list everything
Left out here: 32 versions and 2,126 references. The JSON record has them.