8.8
CVSSv3

CVE-2023-0472

Published: 30/01/2023 Updated: 06/02/2023
CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8

Vulnerability Summary

Use after free in WebRTC in Google Chrome before 109.0.5414.119 allowed a remote malicious user to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Most Upvoted Vulmon Research Post

There is no Researcher post for this vulnerability
Would you like to share something about it? Sign up now to share your knowledge with the community.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

google chrome

Vendor Advisories

Multiple security issues were discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure For the stable distribution (bullseye), these problems have been fixed in version 10905414119-1~deb11u1 We recommend that you upgrade your chromium packages For the detailed security status o ...
A new version of  LTS Candidate, LTC-108, 10805359219 (Platform Version: 15183820),  is being rolled out for most ChromeOS devices Release notes for LTC-108 can be found here Want to know more about Long-term Support? Click here This update contains multiple Security fixes, including:13 ...
The Stable channel has been updated to 10905414119 for Mac and Linux and 10905414119/120 for Windows, which will roll out over the coming days/weeks A full list of changes in this build is available in the log Security Fixes and RewardsNote: Access to bug details and links may be kept restricted until a majority of user ...

Github Repositories

CVE-2023-0472 Use after free in WebRTC in Google Chrome prior to 10905414119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page (Chromium security severity: High) authentication complexity vector not available not available not available confidentiality integrity availability not available not available not available