CVE-2023-3739

MediumCVSS 6.3

Published: 01/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.35%

27th percentile - higher than 27% of all known CVEs

Summary

Insufficient validation of untrusted input in Chromad in Google Chrome on ChromeOS prior to version 115.0.5790.131 allowed a remote attacker to execute arbitrary code via a crafted shell script.

Risk Assessment

This vulnerability could lead to remote code execution, posing a risk of system takeover by an attacker.

Recommendation

It is recommended to update Google Chrome to the latest version to mitigate this vulnerability.

Original NVD description (English source)

Insufficient validation of untrusted input in Chromad in Google Chrome on ChromeOS prior to 115.0.5790.131 allowed a remote attacker to execute arbitrary code via a crafted shell script. (Chromium security severity: Low)