CVE-2023-3497
MediumCVSS 4.6Exploitation Probability (EPSS)
Low risk3th percentile - higher than 3% of all known CVEs
Summary
An out of bounds read in Google Security Processor firmware in Google Chrome on Chrome OS prior to version 114.0.5735.90 allowed a local attacker to perform denial of service via physical access to the device.
Risk Assessment
An attacker with physical access to the device may cause it to become unavailable, leading to disruptions in organizational operations.
Recommendation
It is recommended to update Google Chrome to version 114.0.5735.90 or later to mitigate the risk associated with this vulnerability.
Original NVD description (English source)
Out of bounds read in Google Security Processor firmware in Google Chrome on Chrome OS prior to 114.0.5735.90 allowed a local attacker to perform denial of service via physical access to the device. (Chromium security severity: Medium)