CVE-2023-1217

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 111.0.5563.64

Description The issue is related to a stack buffer overflow in the Crash reporting component of Google Chrome on Windows. This allows a remote attacker who has compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page.

Recommendations For Google Chrome versions prior to 111.0.5563.64, update to version 111.0.5563.64 or later to resolve the issue. As a temporary workaround, consider restricting access to the Crash reporting component until a patch is available. Avoid using specially crafted HTML pages that could exploit the stack buffer overflow in the Crash reporting component.