CVE-2023-5851

Inappropriate implementation in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to obfuscate security UI via a crafted HTML page. (Chromium security severity: Medium)

• CWE-346

• https://chromereleases.googleblog.com/2023/10/stable-channel-update-for-desktop_31.htmlRelease Notes
• https://crbug.com/1473957Permissions Required
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2MHLJRFWZNY6BFOW25Q4FEESVWZKS4C2/Mailing List
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EBA4KD5ZSV6XWWFLVR5UBYKKNOYMH33H/Mailing List
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PHWLT3M2AQDFD7RNAM3NJMYUC5KHMO5V/Mailing List
• https://security.gentoo.org/glsa/202311-11Third Party Advisory
• https://security.gentoo.org/glsa/202312-07Third Party Advisory
• https://security.gentoo.org/glsa/202401-34
• https://www.debian.org/security/2023/dsa-5546Third Party Advisory
• https://chromereleases.googleblog.com/2023/10/stable-channel-update-for-desktop_31.htmlRelease Notes
• https://crbug.com/1473957Permissions Required
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2MHLJRFWZNY6BFOW25Q4FEESVWZKS4C2/Mailing List
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EBA4KD5ZSV6XWWFLVR5UBYKKNOYMH33H/Mailing List
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PHWLT3M2AQDFD7RNAM3NJMYUC5KHMO5V/Mailing List
• https://security.gentoo.org/glsa/202311-11Third Party Advisory
• https://security.gentoo.org/glsa/202312-07Third Party Advisory
• https://security.gentoo.org/glsa/202401-34
• https://www.debian.org/security/2023/dsa-5546Third Party Advisory

Published

Nov 1, 2023

Last Modified

Jun 17, 2026

Status

Modified

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-5844Unverified Password Change in GitHub repository pimcore/admi…7.2
• CVE-2023-5845The Simple Social Media Share Buttons WordPress plugin befor…5.3
• CVE-2023-5846 Franklin Fueling System TS-550 versions prior to 1.9.23.896…9.8
• CVE-2023-5847 Under certain conditions, a low privileged attacker could l…7.3
• CVE-2023-5849Integer overflow in USB in Google Chrome prior to 119.0.6045…8.8
• CVE-2023-5850Incorrect security UI in Downloads in Google Chrome prior to…4.3
• CVE-2023-5852Use after free in Printing in Google Chrome prior to 119.0.6…8.8
• CVE-2023-5853Incorrect security UI in Downloads in Google Chrome prior to…4.3
• CVE-2023-5854Use after free in Profiles in Google Chrome prior to 119.0.6…8.8
• CVE-2023-5855Use after free in Reading Mode in Google Chrome prior to 119…8.8
• CVE-2023-5856Use after free in Side Panel in Google Chrome prior to 119.0…8.8
• CVE-2023-5857Inappropriate implementation in Downloads in Google Chrome p…8.8