CVE-2023-2033

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 112.0.5615.121

Description The issue is related to a type confusion in V8, which can allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. This can lead to arbitrary code execution. The vulnerability is considered high severity by Chromium. There is evidence that this issue has been exploited in the wild.

Recommendations For versions prior to 112.0.5615.121, update to version 112.0.5615.121 or later to resolve the issue. As a temporary workaround, consider restricting access to potentially vulnerable API endpoints until the update is applied. Avoid using crafted HTML pages that could exploit the type confusion in V8. At the moment, there is no additional information about other mitigation measures.