VDB
GSD-2023-4762
GSD-2023-4762
PUBLISHED
CVSS 8.800000190734863 HIGH
Type Confusion in V8 in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)
Risk Scores
CVSS v3.1
8.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| fedoraproject | fedora | 37, 38, 39 |
| debian | debian_linux | 11.0, 12.0 |
| Chrome | 116.0.5845.179 | |
| chrome | * |
Timeline
- Sep 5, 2023 CVE Published
- Feb 6, 2024 PoC Published
- Feb 23, 2025 PoC Published
- Feb 2, 2026 PoC Published
- Apr 16, 2026 Distribution Patch
References
- https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop.html url
- https://crbug.com/1473247 url
- https://www.debian.org/security/2023/dsa-5491 url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/27NR3KG553CG6LGPMP6SHWEVHTYPL6RC/ url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T655QF7CQ3DYAMPFV7IECQYGDEUIVVT/ url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KUQ7CTX3W372X3UY56VVNAHCH6H2F4X3/ url
- https://security.gentoo.org/glsa/202311-11 url
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-4762 url
- https://security.gentoo.org/glsa/202312-07 url
- https://security.gentoo.org/glsa/202401-34 url
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-4762 url