PT-2023-3017
CVE-2023-3079
·
تاريخ النشر
2023-06-05
·
تاريخ التحديث
2026-10-31
الوصف من
CVSS 2.0
10
عاليةالمقاييسAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 114.0.5735.110
Description
The issue is related to a type confusion in V8, which could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. This could lead to arbitrary code execution. The Chromium security severity of this issue is High.
Recommendations
For Google Chrome versions prior to 114.0.5735.110, update to version 114.0.5735.110 or later to resolve the issue. As a temporary workaround, consider restricting access to potentially vulnerable API endpoints or disabling the use of crafted HTML pages until the update is applied.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾