Every CVE Search/ Get API key

CVE-2023-1221

Insufficient policy enforcement in Extensions API in Google Chrome prior to 111.0.5563.64 allowed...

4.3 MediumFix available

Insufficient policy enforcement in Extensions API in Google Chrome prior to 111.0.5563.64 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension. (Chromium security severity: Medium)

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
None
Integrity
Low
Availability
None

Exploit likelihood

0.33%Up 0.3 points since Mar 8, 2023
90%50%10%1%

What each source reports

NVD Score used 4.3

Insufficient policy enforcement in Extensions API in Google Chrome prior to 111.0.5563.64 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension. (Chromium security severity: Medium)

Record
CVE-2023-1221
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Updated
2026-11-02
CVE List No score

Insufficient policy enforcement in Extensions API in Google Chrome prior to 111.0.5563.64 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension. (Chromium security severity: Medium)

Record
CVE-2023-1221
Updated
2026-11-02
EUVDEUVD-2023-23500 0.0

Insufficient policy enforcement in Extensions API in Google Chrome prior to 111.0.5563.64 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension. (Chromium security severity: Medium)

Record
EUVD-2023-23500
CVSS
0.0 NoneCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Updated
2026-11-03
GitHub AdvisoriesGHSA-c8vp-x3mr-73x8 4.3

Insufficient policy enforcement in Extensions API in Google Chrome prior to 111.0.5563.64 allowed...

Insufficient policy enforcement in Extensions API in Google Chrome prior to 111.0.5563.64 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension. (Chromium security severity: Medium)

Record
GHSA-c8vp-x3mr-73x8
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Updated
2026-11-02
OSV 4.3

Insufficient policy enforcement in Extensions API in Google Chrome prior to 111.0.5563.64 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension. (Chromium security severity: Medium)

Record
CVE-2023-1221
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Updated
2026-11-02
OSVDEBIAN-CVE-2023-1221 4.3

Insufficient policy enforcement in Extensions API in Google Chrome prior to 111.0.5563.64 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension. (Chromium security severity: Medium)

Record
DEBIAN-CVE-2023-1221
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Updated
2026-11-02
Show 8 moreShow less
OSVUBUNTU-CVE-2023-1221 4.3

Insufficient policy enforcement in Extensions API in Google Chrome prior to 111.0.5563.64 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension. (Chromium security severity: Medium)

Record
UBUNTU-CVE-2023-1221
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Updated
2026-11-02
OSVMGASA-2023-0090 No score

Updated chromium-browser-stable packages fix security vulnerability

High CVE-2023-1213: Use after free in Swiftshader. Reported by Jaehun Jeong(@n3sk) of Theori on 2023-01-30

High CVE-2023-1214: Type Confusion in V8. Reported by Man Yue Mo of GitHub Security Lab on 2023-02-03

High CVE-2023-1215: Type Confusion in CSS. Reported by Anonymous on 2023-02-17

High CVE-2023-1216: Use after free in DevTools. Reported by Ganjiang Zhou(@refrain_areu) of ChaMd5-H1 team on 2023-02-21

High CVE-2023-1217: Stack buffer overflow in Crash reporting. Reported by sunburst of Ant Group Tianqiong Security Lab on 2023-02-03

High CVE-2023-1218: Use after free in WebRTC. Reported by Anonymous on 2023-02-07

High CVE-2023-1219: Heap buffer overflow in Metrics. Reported by Sergei Glazunov of Google Project Zero on 2023-02-13

High CVE-2023-1220: Heap buffer overflow in UMA. Reported by Sergei Glazunov of Google Project Zero on 2023-02-17

Medium CVE-2023-1221: Insufficient policy enforcement in Extensions API. Reported by Ahmed ElMasry on 2022-11-16

Medium CVE-2023-1222: Heap buffer overflow in Web Audio API. Reported by Cassidy Kim(@cassidy6564) on 2022-12-24

Medium CVE-2023-1223: Insufficient policy enforcement in Autofill. Reported by Ahmed ElMasry on 2022-12-07

Medium CVE-2023-1224: Insufficient policy enforcement in Web Payments API. Reported by Thomas Orlita on 2022-12-25

Medium CVE-2023-1225: Insufficient policy enforcement in Navigation. Reported by Roberto Ffrench-Davis @Lihaft on 2023-01-20

Medium CVE-2023-1226: Insufficient policy enforcement in Web Payments API. Reported by Anonymous on 2019-10-10

Medium CVE-2023-1227: Use after free in Core. Reported by @ginggilBesel on 2022-07-31

Medium CVE-2023-1228: Insufficient policy enforcement in Intents. Reported by Axel Chong on 2022-09-18

Medium CVE-2023-1229: Inappropriate implementation in Permission prompts. Reported by Thomas Orlita on 2020-12-20

Medium CVE-2023-1230: Inappropriate implementation in WebApp Installs. Reported by Axel Chong on 2022-12-30

Medium CVE-2023-1231: Inappropriate implementation in Autofill. Reported by Yan Zhu, Brave on 2021-11-30

Low CVE-2023-1232: Insufficient policy enforcement in Resource Timing. Reported by Sohom Datta on 2022-07-24

Low CVE-2023-1233: Insufficient policy enforcement in Resource Timing. Reported by Soroush Karami on 2020-01-25

Low CVE-2023-1234: Inappropriate implementation in Intents. Reported by Axel Chong on 2023-01-03

Low CVE-2023-1235: Type Confusion in DevTools. Reported by raven at KunLun lab on 2023-01-03

Low CVE-2023-1236: Inappropriate implementation in Internals. Reported by Alesandro Ortiz on 2022-10-14

Record
MGASA-2023-0090
Updated
2026-11-02
OSVopenSUSE-SU-2023:0068-1 No score

Security update for chromium

This update for chromium fixes the following issues:

Chromium 111.0.5563.64

  • New View Transitions API
  • CSS Color Level 4
  • New developer tools in style panel for color functionality
  • CSS added trigonometric functions, additional root font units and extended the n-th child pseudo selector.
  • previousslide and nextslide actions are now part of the Media Session API
  • A number of security fixes (boo#1209040)
  • CVE-2023-1213: Use after free in Swiftshader
  • CVE-2023-1214: Type Confusion in V8
  • CVE-2023-1215: Type Confusion in CSS
  • CVE-2023-1216: Use after free in DevTools
  • CVE-2023-1217: Stack buffer overflow in Crash reporting
  • CVE-2023-1218: Use after free in WebRTC
  • CVE-2023-1219: Heap buffer overflow in Metrics
  • CVE-2023-1220: Heap buffer overflow in UMA
  • CVE-2023-1221: Insufficient policy enforcement in Extensions API
  • CVE-2023-1222: Heap buffer overflow in Web Audio API
  • CVE-2023-1223: Insufficient policy enforcement in Autofill
  • CVE-2023-1224: Insufficient policy enforcement in Web Payments API
  • CVE-2023-1225: Insufficient policy enforcement in Navigation
  • CVE-2023-1226: Insufficient policy enforcement in Web Payments API
  • CVE-2023-1227: Use after free in Core
  • CVE-2023-1228: Insufficient policy enforcement in Intents
  • CVE-2023-1229: Inappropriate implementation in Permission prompts
  • CVE-2023-1230: Inappropriate implementation in WebApp Installs
  • CVE-2023-1231: Inappropriate implementation in Autofill
  • CVE-2023-1232: Insufficient policy enforcement in Resource Timing
  • CVE-2023-1233: Insufficient policy enforcement in Resource Timing
  • CVE-2023-1234: Inappropriate implementation in Intents
  • CVE-2023-1235: Type Confusion in DevTools
  • CVE-2023-1236: Inappropriate implementation in Internals
Record
openSUSE-SU-2023:0068-1
Updated
2026-11-02
OSVopenSUSE-SU-2023:0114-1 No score

Security update for opera

This update for opera fixes the following issues:

  • Update to 99.0.4788.13

    • CHR-9290 Update Chromium on desktop-stable-113-4788 to 113.0.5672.127
    • DNA-107317 __delayLoadHelper2 crash in crashreporter

  • The update to chromium 113.0.5672.127 fixes following issues: CVE-2023-2721, CVE-2023-2722, CVE-2023-2723, CVE-2023-2724, CVE-2023-2725, CVE-2023-2726

  • Update to 99.0.4788.9

    • CHR-9283 Update Chromium on desktop-stable-113-4788 to 113.0.5672.93
    • DNA-107638 Translations for O99
    • DNA-107678 Crash Report [@ BrowserContextKeyedServiceFactory:: BrowserContextKeyedServiceFactory(char const*, BrowserContextDependencyManager*) ]
    • DNA-107795 Fix wrong german translation of 'Close All Duplicate Tabs'
    • DNA-107800 Fonts on section#folder and AddSitePanel not readable when animated wallpaper chosen
    • DNA-107840 Promote O99 to stable

  • Update to 98.0.4759.39

    • DNA-102363 ChromeFileSystemAccessPermissionContextTest. ConfirmSensitiveEntryAccess_DangerousFile fails
    • DNA-105534 [Add to Opera] Incorrect scroll on modal when browser window size is too small
    • DNA-106649 Opening new tab when pinned tab is active gives 2 active tabs
    • DNA-107226 Speed Dial freezes and empty space remains after Continue booking tile dragging
    • DNA-107435 Building archive_source_release target fails
    • DNA-107441 [Start page] Right mouse click on tile in continue on section opens target site in current tab
    • DNA-107508 Crash at permissions::PermissionRecoverySuccessRate Tracker::TrackUsage(ContentSettingsType)
    • DNA-107528 Handle real-time SD impression reporting
    • DNA-107546 Context menus broken with one workspace
    • DNA-107548 Paste from Context Menu doesn’t work for Search on StartPage
    • DNA-107560 Optimize real-time SD impression reporting

  • Update to 98.0.4759.15

    • CHR-9259 Update Chromium on desktop-stable-112-4759 to 112.0.5615.121
    • CHR-9264 Update Chromium on desktop-stable-112-4759 to 112.0.5615.165
    • DNA-104949 Cleanup reauthorizer and permission
    • DNA-106748 Presubmit problems
    • DNA-107262 Delete faulty translations

  • The update to chromium 112.0.5615.165 fixes following issues: CVE-2023-2133, CVE-2023-2134, CVE-2023-2135, CVE-2023-2136, CVE-2023-2137

  • Changes in 98.0.4759.6

    • CHR-9255 Update Chromium on desktop-stable-112-4759 to 112.0.5615.87
    • DNA-106342 Crash when blocking cookies in sidebar web.infobars::InfoBarManager::AddInfoBar(std::Cr::unique_ptr, bool)
    • DNA-107054 Apply patch for CVE-2023-2033
    • DNA-107141 Promote O98 to stable
    • DNA-107142 Translations for O98

  • Update to 97.0.4719.83

    • DNA-106342 Crash when blocking cookies in sidebar web. infobars::InfoBarManager::AddInfoBar(std::Cr::unique_ptr, bool)
    • DNA-106550 [SD][Drag&Drop] Create a static manual layout for speed dials
    • DNA-106791 Run smoketests on mac arm builds
    • DNA-107054 Apply patch for CVE-2023-2033

  • Remove setup_repo.sh, fix non-executable-script rpmlint warning and we do not want create a repo

  • Update to 97.0.4719.63

    • CHR-9245 Update Chromium on desktop-stable-111-4719 to 111.0.5563.147
    • DNA-105919 Set new Baidu search string
    • DNA-106168 EasySetup update

  • Update to 97.0.4719.43

    • CHR-9236 Update Chromium on desktop-stable-111-4719 to 111.0.5563.111
    • DNA-105141 Tabs to the right of the currently active one swap their position with another when clicked
    • DNA-106044 Translations for O97
    • DNA-106300 Fix rule for generating archive_browser_sym_files on crossplatform builds
    • DNA-106412 Content of popup not generated for some extensions when using more then one worksapce
    • DNA-106433 Extend Easy Setup API
    • DNA-106435 Increase timeout for the welcome page
    • DNA-106453 Public build from desktop-stable-111-4719 do not compile

  • The update to chromium 111.0.5563.111 fixes following issues: CVE-2023-1528, CVE-2023-1529, CVE-2023-1530, CVE-2023-1531, CVE-2023-1532,…

Record
openSUSE-SU-2023:0114-1
Updated
2026-11-02
OSVopenSUSE-SU-2023:0115-1 No score

Security update for opera

This update for opera fixes the following issues:

  • Update to 99.0.4788.13

    • CHR-9290 Update Chromium on desktop-stable-113-4788 to 113.0.5672.127
    • DNA-107317 __delayLoadHelper2 crash in crashreporter

  • The update to chromium 113.0.5672.127 fixes following issues: CVE-2023-2721, CVE-2023-2722, CVE-2023-2723, CVE-2023-2724, CVE-2023-2725, CVE-2023-2726

  • Update to 99.0.4788.9

    • CHR-9283 Update Chromium on desktop-stable-113-4788 to 113.0.5672.93
    • DNA-107638 Translations for O99
    • DNA-107678 Crash Report [@ BrowserContextKeyedServiceFactory:: BrowserContextKeyedServiceFactory(char const*, BrowserContextDependencyManager*) ]
    • DNA-107795 Fix wrong german translation of 'Close All Duplicate Tabs'
    • DNA-107800 Fonts on section#folder and AddSitePanel not readable when animated wallpaper chosen
    • DNA-107840 Promote O99 to stable

  • Update to 98.0.4759.39

    • DNA-102363 ChromeFileSystemAccessPermissionContextTest. ConfirmSensitiveEntryAccess_DangerousFile fails
    • DNA-105534 [Add to Opera] Incorrect scroll on modal when browser window size is too small
    • DNA-106649 Opening new tab when pinned tab is active gives 2 active tabs
    • DNA-107226 Speed Dial freezes and empty space remains after Continue booking tile dragging
    • DNA-107435 Building archive_source_release target fails
    • DNA-107441 [Start page] Right mouse click on tile in continue on section opens target site in current tab
    • DNA-107508 Crash at permissions::PermissionRecoverySuccessRate Tracker::TrackUsage(ContentSettingsType)
    • DNA-107528 Handle real-time SD impression reporting
    • DNA-107546 Context menus broken with one workspace
    • DNA-107548 Paste from Context Menu doesn’t work for Search on StartPage
    • DNA-107560 Optimize real-time SD impression reporting
Record
openSUSE-SU-2023:0115-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:12775-1 No score

chromedriver-111.0.5563.64-2.1 on GA media

These are all security issues fixed in the chromedriver-111.0.5563.64-2.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:12775-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:12948-1 No score

ungoogled-chromium-113.0.5672.92-1.1 on GA media

These are all security issues fixed in the ungoogled-chromium-113.0.5672.92-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:12948-1
Updated
2026-11-02
OSVUSN-5949-1 No score

chromium-browser vulnerabilities

It was discovered that Chromium could be made to write out of bounds in several components. A remote attacker could possibly use this issue to corrupt memory via a crafted HTML page, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2023-0930, CVE-2023-1219, CVE-2023-1220, CVE-2023-1222)

It was discovered that Chromium contained an integer overflow in the PDF component. A remote attacker could possibly use this issue to corrupt memory via a crafted PDF file, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2023-0933)

It was discovered that Chromium did not properly manage memory in several components. A remote attacker could possibly use this issue to corrupt memory via a crafted HTML page, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2023-0941, CVE-2023-0928, CVE-2023-0929, CVE-2023-0931, CVE-2023-1213, CVE-2023-1216, CVE-2023-1218)

It was discovered that Chromium did not correctly distinguish data types in several components. A remote attacker could possibly use this issue to corrupt memory via a crafted HTML page, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2023-1214, CVE-2023-1215, CVE-2023-1235)

It was discovered that Chromium insufficiently enforced policies. An attacker could possibly use this issue to bypass navigation restrictions. (CVE-2023-1221, CVE-2023-1224)

It was discovered that Chromium insufficiently enforced policies in Web Payments API. A remote attacker could possibly use this issue to bypass content security policy via a crafted HTML page. (CVE-2023-1226)

It was discovered that Chromium contained an inappropriate implementation in the Permission prompts component. A remote attacker could possibly use this issue to bypass navigation restrictions via a crafted HTML page. (CVE-2023-1229)

It was discovered that Chromium insufficiently enforced policies in Resource Timing component. A remote attacker could possibly use this issue to obtain sensitive information. (CVE-2023-1232, CVE-2023-1233)

It was discovered that Chromium contained an inappropriate implementation in the Internals component. A remote attacker could possibly use this issue to spoof the origin of an iframe via a crafted HTML page. (CVE-2023-1236)

Record
USN-5949-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
chromium
Debian:12
 before 111.0.5563.64-1
111.0.5563.64-1
chromium
Debian:13
 before 111.0.5563.64-1
111.0.5563.64-1
chromium
Debian:14
 before 111.0.5563.64-1
111.0.5563.64-1
chromium
Debian:11
From an advisory covering 25 CVEs
 before 111.0.5563.64-1~deb11u1, plus listed versions
100.0.4896.127-1100.0.4896.127-1~deb11u1100.0.4896.60-1100.0.4896.60-1~deb11u1100.0.4896.75-1
Show 45 moreShow less
100.0.4896.75-1~deb11u1100.0.4896.88-1100.0.4896.88-1~deb11u1101.0.4951.41-1101.0.4951.41-1~deb11u1101.0.4951.41-2101.0.4951.54-1101.0.4951.64-1101.0.4951.64-1~deb11u1102.0.5005.115-1102.0.5005.115-1~deb11u1102.0.5005.61-1102.0.5005.61-1~deb11u1103.0.5060.114-1103.0.5060.114-1~deb11u1103.0.5060.134-1103.0.5060.134-1~deb11u1103.0.5060.53-1103.0.5060.53-1~deb11u1104.0.5112.101-1104.0.5112.101-1~deb11u1104.0.5112.79-1104.0.5112.79-1~deb11u1105.0.5195.102-1105.0.5195.102-1~deb11u1105.0.5195.125-1105.0.5195.125-1~deb11u1105.0.5195.52-1105.0.5195.52-1~deb11u1106.0.5249.103-1106.0.5249.103-2106.0.5249.119-1106.0.5249.119-1~deb11u1106.0.5249.61-1106.0.5249.61-1~deb11u1106.0.5249.91-1106.0.5249.91-1~deb11u1107.0.5304.110-1107.0.5304.110-1~deb11u1107.0.5304.110-2107.0.5304.121-1107.0.5304.121-1~deb11u1107.0.5304.68-1107.0.5304.68-1~deb11u1107.0.5304.87-1
111.0.5563.64-1~deb11u1
chromium-browser-stable
Mageia:8
From an advisory covering 24 CVEs
 before 111.0.5563.64-1.mga8
111.0.5563.64-1.mga8
chromium-browser
Ubuntu:18.04:LTS
 before 111.0.5563.64-0ubuntu0.18.04.5, plus listed versions
61.0.3163.100-0ubuntu1.137862.0.3202.62-0ubuntu0.17.10.138062.0.3202.89-0ubuntu1.138662.0.3202.94-0ubuntu1.138863.0.3239.84-0ubuntu1
Show 45 moreShow less
63.0.3239.108-0ubuntu164.0.3282.119-0ubuntu164.0.3282.140-0ubuntu164.0.3282.167-0ubuntu165.0.3325.146-0ubuntu165.0.3325.181-0ubuntu166.0.3359.139-0ubuntu0.18.04.366.0.3359.181-0ubuntu0.18.04.167.0.3396.99-0ubuntu0.18.04.168.0.3440.75-0ubuntu0.18.04.168.0.3440.106-0ubuntu0.18.04.169.0.3497.81-0ubuntu0.18.04.170.0.3538.67-0ubuntu0.18.04.170.0.3538.77-0ubuntu0.18.04.170.0.3538.110-0ubuntu0.18.04.171.0.3578.80-0ubuntu0.18.04.171.0.3578.98-0ubuntu0.18.04.172.0.3626.119-0ubuntu0.18.04.172.0.3626.121-0ubuntu0.18.04.173.0.3683.75-0ubuntu0.18.04.173.0.3683.86-0ubuntu0.18.04.174.0.3729.169-0ubuntu0.18.04.175.0.3770.90-0ubuntu0.18.04.175.0.3770.142-0ubuntu0.18.04.176.0.3809.87-0ubuntu0.18.04.176.0.3809.100-0ubuntu0.18.04.177.0.3865.90-0ubuntu0.18.04.178.0.3904.70-0ubuntu0.18.04.278.0.3904.97-0ubuntu0.18.04.178.0.3904.108-0ubuntu0.18.04.179.0.3945.79-0ubuntu0.18.04.179.0.3945.130-0ubuntu0.18.04.180.0.3987.87-0ubuntu0.18.04.180.0.3987.149-0ubuntu0.18.04.180.0.3987.163-0ubuntu0.18.04.181.0.4044.122-0ubuntu0.18.04.181.0.4044.138-0ubuntu0.18.04.183.0.4103.61-0ubuntu0.18.04.184.0.4147.105-0ubuntu0.18.04.185.0.4183.83-0ubuntu0.18.04.285.0.4183.121-0ubuntu0.18.04.186.0.4240.75-0ubuntu0.18.04.186.0.4240.198-0ubuntu0.18.04.187.0.4280.66-0ubuntu0.18.04.189.0.4389.82-0ubuntu0.18.04.1
111.0.5563.64-0ubuntu0.18.04.5
chromium-browser
Ubuntu:18.04:LTS
From an advisory covering 22 CVEs
 before 111.0.5563.64-0ubuntu0.18.04.5, plus listed versions
61.0.3163.100-0ubuntu1.137862.0.3202.62-0ubuntu0.17.10.138062.0.3202.89-0ubuntu1.138662.0.3202.94-0ubuntu1.138863.0.3239.84-0ubuntu1
Show 45 moreShow less
63.0.3239.108-0ubuntu164.0.3282.119-0ubuntu164.0.3282.140-0ubuntu164.0.3282.167-0ubuntu165.0.3325.146-0ubuntu165.0.3325.181-0ubuntu166.0.3359.139-0ubuntu0.18.04.366.0.3359.181-0ubuntu0.18.04.167.0.3396.99-0ubuntu0.18.04.168.0.3440.75-0ubuntu0.18.04.168.0.3440.106-0ubuntu0.18.04.169.0.3497.81-0ubuntu0.18.04.170.0.3538.67-0ubuntu0.18.04.170.0.3538.77-0ubuntu0.18.04.170.0.3538.110-0ubuntu0.18.04.171.0.3578.80-0ubuntu0.18.04.171.0.3578.98-0ubuntu0.18.04.172.0.3626.119-0ubuntu0.18.04.172.0.3626.121-0ubuntu0.18.04.173.0.3683.75-0ubuntu0.18.04.173.0.3683.86-0ubuntu0.18.04.174.0.3729.169-0ubuntu0.18.04.175.0.3770.90-0ubuntu0.18.04.175.0.3770.142-0ubuntu0.18.04.176.0.3809.87-0ubuntu0.18.04.176.0.3809.100-0ubuntu0.18.04.177.0.3865.90-0ubuntu0.18.04.178.0.3904.70-0ubuntu0.18.04.278.0.3904.97-0ubuntu0.18.04.178.0.3904.108-0ubuntu0.18.04.179.0.3945.79-0ubuntu0.18.04.179.0.3945.130-0ubuntu0.18.04.180.0.3987.87-0ubuntu0.18.04.180.0.3987.149-0ubuntu0.18.04.180.0.3987.163-0ubuntu0.18.04.181.0.4044.122-0ubuntu0.18.04.181.0.4044.138-0ubuntu0.18.04.183.0.4103.61-0ubuntu0.18.04.184.0.4147.105-0ubuntu0.18.04.185.0.4183.83-0ubuntu0.18.04.285.0.4183.121-0ubuntu0.18.04.186.0.4240.75-0ubuntu0.18.04.186.0.4240.198-0ubuntu0.18.04.187.0.4280.66-0ubuntu0.18.04.189.0.4389.82-0ubuntu0.18.04.1
111.0.5563.64-0ubuntu0.18.04.5
chromium
SUSE:Package Hub 15 SP4
From an advisory covering 24 CVEs
 before 111.0.5563.64-bp154.2.73.1
111.0.5563.64-bp154.2.73.1
chromium
openSUSE:Leap 15.4
From an advisory covering 24 CVEs
 before 111.0.5563.64-bp154.2.73.1
111.0.5563.64-bp154.2.73.1
opera
openSUSE:Leap 15.4 NonFree
From an advisory covering 43 CVEs
 before 99.0.4788.13-lp154.2.47.1
99.0.4788.13-lp154.2.47.1
opera
openSUSE:Leap 15.5 NonFree
From an advisory covering 89 CVEs
 before 99.0.4788.13-lp155.3.6.1
99.0.4788.13-lp155.3.6.1
chromium
openSUSE:Tumbleweed
From an advisory covering 24 CVEs
 before 111.0.5563.64-2.1
111.0.5563.64-2.1
chromium
openSUSE:Tumbleweed
From an advisory covering 2310 CVEs
 before 113.0.5672.92-1.1
113.0.5672.92-1.1

History

History
RecordedChangedSources
affected, facts
aliases, publishedEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-1221 is a medium vulnerability (CVSS 4.3) in Google Chrome, published March 7, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.33%, the 26th percentile. Fixed in chromium 111.0.5563.64-1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 81 versions, 2,152 references and the rest of 1 source description. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open