CVE-2023-1234General(google / android)

MEDIUMCVSS 4.3 · MEDIUM

Exploitation ongoing with high activity in latest observed window (1 mentions)

Immediate actions

Patch google android systems immediately
Assume compromise if assets are exposed

Recommended action window: Immediate (within 24h)

NVD description

Inappropriate implementation in Intents in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security severity: Low)

google CVEs Back to dashboard

4.0/ 10 priority

Sources & remediation

Other references

Priority

MEDIUM

Exploitation

ACTIVE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

android
chrome

Threat summary

Active exploitation appears in 1 classified signals
Patch or workaround signal is available
7 mentions across 6 observed days
Momentum state: stable

What's happening

Active exploitation reported across 1 signal
Patch or workaround mentioned in 1 signal
Technical details provided in 1 signal
General: 5 classified signals
Disclosure: 1 classified signal
Peaked 1d ago at 2 mentions (2026-04-29); latest day: 1
7 total mentions across 6 days

Affected systems

Vendors

google

Products

androidchrome

1 version affected across 2 products

Deep dive

Activity timeline7 mentions / 6d

Signal classification3 categories

General

571.4%

Active Exploitation

114.3%

Disclosure

114.3%

Classification over time

Date	Total	Labels

2026-02-09	1	General1
2026-03-03	1	General1
2026-03-06	1	General1
2026-04-06	1	General1
2026-04-29	2	Active Exploitation1General1
2026-07-10	1	Disclosure1

Full discourse7 posts

Mj | Cybersecurity@mj_nw01185d
General
1️⃣ الـ CVE (Common Vulnerabilities and Exposures): اعتبره "بطاقة أحوال" أو "رقم تسلسل" للثغرة. وظيفته يعطي الثغرة اسم فريد عشان الكل يعرف عن أي ثغرة نتكلم عنها ونوع الثغرة ومين هو المتضرر مثال: CVE-2023-1234 - الـ 2023 هي سنة اكتشاف الثغرة. - الرقم الأخير هو معرف خاص فيها.
Post summary
The content explains the purpose and structure of CVE identifiers, lacking any discussion of specific vulnerabilities, exploitation, or remediation.
10011574
3.4K followersView on X
CyberNewsDaily@NewsDaily1857990d
Disclosure
↞ HIGH WhatsApp-to-Host Attack Exploits OpenClaw Flaws for Credential Theft, Privilege Escalation via CVE-2023-1234 via The Hacker News #ThreatIntelligence #Cybersecurity https://t.co/0ufFeg7HFu
Post summary
A WhatsApp-to-host attack has surfaced, leveraging OpenClaw vulnerabilities to steal credentials and elevate privileges via CVE‑2023‑1234, as reported by The Hacker News.
1000047
14 followersView on X
Lyrie.ai@lyrie_ai162d
General
In Q3 2023 alone, Zero Day vulnerabilities surged by 40%, with CVE-2023-1234 and CVE-2023-5678 leading the pack. Defenders must prioritize patching and real-time monitoring to stay ahead. 🔍 #CVE #ThreatIntel
Post summary
The post notes an increase in zero‑day CVEs during Q3 2023 and recommends patching and monitoring without providing detailed vulnerability or exploit information.
1000078
127 followersView on X
Lyrie.ai@lyrie_ai162d
Active Exploitation
40% · CVE-2023-1234 RIGHT NOW on X, 'Zero Day & CVE Exploits' is trending with 49 interactions! 🚨 The recent $LTC incident highlights the vulnerabilities being exploited by attackers, showcasing the urgency for robust security measures. #C https://t.co/EGMzFjjvxi
Post summary
The tweet indicates that CVE-2023-1234 is currently being exploited, referencing a recent $LTC incident, but it offers no technical, patch, or PoC details.
10000115
127 followersView on X
David@davidsheyi216d
General
5/ Incorporate real-time threat intelligence to adapt rules quickly. CVE-2023-1234 provides insight into recent vulnerabilities. #CyberSecurity #SOC #InfoSec
Post summary
The post only mentions CVE‑2023‑1234 in passing, without any further technical or operational detail.
1000052
556 followersView on X
David@davidsheyi219d
General
9/ Regularly update docs, especially after incidents. Use real-world examples like CVE-2023-1234 to illustrate points. #InfoSec #DevOps
Post summary
The post cites CVE-2023-1234 as a real‑world example but provides no technical or operational details.
1000066
556 followersView on X
taij.triki@TaijTriki241d
General
1️⃣ Identification et Nature CVE (Common Vulnerabilities and Exposures) : L'identifiant unique (ex: CVE-2023-1234) pour une vulnérabilité publique spécifique dans un logiciel ou un matériel.
Post summary
The text is a brief definition of what a CVE identifier is, without any additional technical or operational details.
10000102
View on X

CPE platform detail2 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

2 of 2 entries

Part	Vendor	Product	Version	Target SW	Target HW
OS	google	android	-	-	-
App	google	chrome	-	-	-

Explore more

Back to dashboard google CVEs android vulnerabilities

What researchers are saying

CVE-2023-1234

Mj | Cybersecurity[verified]@mj_nw01General

The content explains the purpose and structure of CVE identifiers, lacking any discussion of specific vulnerabilities, exploitation, or remediation.

Lyrie.ai[verified]@lyrie_aiGeneral

The post notes an increase in zero‑day CVEs during Q3 2023 and recommends patching and monitoring without providing detailed vulnerability or exploit information.

Lyrie.ai[verified]@lyrie_aiActive Exploitation

The tweet indicates that CVE-2023-1234 is currently being exploited, referencing a recent $LTC incident, but it offers no technical, patch, or PoC details.

CyberNewsDaily@NewsDaily18579Disclosure

A WhatsApp-to-host attack has surfaced, leveraging OpenClaw vulnerabilities to steal credentials and elevate privileges via CVE‑2023‑1234, as reported by The Hacker News.

David@davidsheyiGeneral

The post only mentions CVE‑2023‑1234 in passing, without any further technical or operational detail.

David@davidsheyiGeneral

The post cites CVE-2023-1234 as a real‑world example but provides no technical or operational details.

taij.triki@TaijTrikiGeneral

The text is a brief definition of what a CVE identifier is, without any additional technical or operational details.