CVE Catalog

CVE-2023-3420

HighCVSS 8.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Very high risk
62.11%

99th percentile - higher than 99% of all known CVEs

Summary

Type Confusion in V8 in Google Chrome prior to version 114.0.5735.198 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Risk Assessment

This vulnerability could lead to serious security issues, including remote code execution, posing a threat to the organization's data and systems.

Recommendation

It is recommended to update Google Chrome to the latest version to mitigate the risks associated with this vulnerability.

Original NVD description (English source)

Type Confusion in V8 in Google Chrome prior to 114.0.5735.198 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS