CVE-2023-2723

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 113.0.5672.126

Description The issue is related to a use after free in DevTools, allowing a remote attacker who has compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. This could lead to unauthorized access to confidential data, disruption of data integrity, and denial of service. The attacker can use a specially crafted HTML page to exploit this issue.

Recommendations For versions prior to 113.0.5672.126, update to version 113.0.5672.126 or later to resolve the issue. As a temporary workaround, consider restricting access to the DevTools feature until a patch is applied. Avoid using DevTools with untrusted HTML pages until the issue is resolved.