PT-2023-3017
CVE-2023-3079
·
Published
2023-06-05
·
Updated
2026-10-31
Description by
CVSS 2.0
10
HighMetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 114.0.5735.110
Description
The issue is related to a type confusion in V8, which could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. This could lead to arbitrary code execution. The Chromium security severity of this issue is High.
Recommendations
For Google Chrome versions prior to 114.0.5735.110, update to version 114.0.5735.110 or later to resolve the issue. As a temporary workaround, consider restricting access to potentially vulnerable API endpoints or disabling the use of crafted HTML pages until the update is applied.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾