CVE-2023-5472

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 118.0.5993.117 Microsoft Edge versions prior to 118.0.5993.117

Description The issue is related to a use after free in the Profiles component, which can be exploited by a remote attacker using a crafted HTML page. This could potentially lead to heap corruption, allowing the attacker to execute arbitrary code or cause a denial of service.

Recommendations For Google Chrome versions prior to 118.0.5993.117, update to version 118.0.5993.117 or later to resolve the issue. For Microsoft Edge versions prior to 118.0.5993.117, update to version 118.0.5993.117 or later to resolve the issue. As a temporary workaround, consider restricting access to crafted HTML pages until a patch is available.