8.8
CVSSv3

CVE-2023-4572

Published: 29/08/2023 Updated: 31/01/2024
CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8
VMScore: 0

Vulnerability Summary

Use after free in MediaStream in Google Chrome before 116.0.5845.140 allowed a remote malicious user to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

google chrome

fedoraproject fedora 37

fedoraproject fedora 38

fedoraproject fedora 39

debian debian linux 11.0

debian debian linux 12.0

Vendor Advisories

A security issue was discovered in Chromium, which could result in the execution of arbitrary code For the oldstable distribution (bullseye), this problem has been fixed in version 11605845140-1~deb11u1 For the stable distribution (bookworm), this problem has been fixed in version 11605845140-1~deb12u1 We recommend that you upgrade your ch ...
LTS-108 is being updated in the LTS channel to 10805359243 (Platform Version: 151831060) for most ChromeOS devices Want to know more about Long Term Support? Click hereThis update contains multiple Security fixes, including:1479274 High CVE-2023-4863 Heap buffer overflow in Web1472492 High CVE-202 ...
The Stable and Extended stable channels has been updated to 11605845140 for Mac and Linux and 11605845140/141 for Windows, which will roll out over the coming days/weeks A full list of changes in this build is available in the logSecurity Fixes and RewardsNote: Access to bug details and links may be kept restricted until a majority of user ...
The Long Term Support Candidate has been promoted to ChromeOS LTS 114 and is rolling out to most ChromeOS devices The current version is 11405735334 (Platform Version: 15437700)If you are currently on the ChromeOS Long Term Support (LTS) channel (and not pinned to 108), your devices will automatically update from ChromeOS LTS ...