CVE-2023-2938 (published 2023-05-30T21:31:40.894Z)
Inappropriate implementation in Picture In Picture in Google Chrome prior to 114.0.5735.90 allowed a remote attacker who had compromised the renderer process to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Medium)
Affected products: Vendor: Google
Product: Chrome
Versions: 114.0.5735.90