VDB

DEBIAN-CVE-2023-6706

DEBIAN-CVE-2023-6706 PUBLISHED CVSS 8.800000190734863 HIGH

Use after free in FedCM in Google Chrome prior to 120.0.6099.109 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Risk Scores

CVSS 3.1
8.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersions
Debian:11chromium*, 119.0.6045.105-1, 119.0.6045.123-1
Debian:14chromium0, 0, 0
Debian:12chromium114.0.5735.106-1~deb12u1, 114.0.5735.133-1, 114.0.5735.133-1~deb11u1
Debian:13chromium0, 0, 0

Timeline

  • Dec 14, 2023 CVE Published
  • Apr 28, 2026 CVE Updated
Open in Interactive Console →
$ Console Community · 100/wk Open console ›