CVE-2023-4357

Google Chrome had a flaw where it didn't properly check XML data from websites, allowing attackers to bypass protections that prevent websites from accessing your files. A hacker could create a malicious webpage that tricks your browser into accessing files it shouldn't.

Insufficient input validation in XML processing allowed remote attackers to bypass file access restrictions through a crafted HTML page. The vulnerability exists in Chrome versions prior to 116.0.5845.96 and requires user interaction (opening a malicious page). The attack vector is network-based with low complexity, affecting the confidentiality of local file access.