CVE Catalog

CVE-2023-4068

HighCVSS 8.1
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Very high risk
15.48%

96th percentile - higher than 96% of all known CVEs

Summary

Type Confusion in V8 in Google Chrome prior to version 115.0.5790.170 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page.

Risk Assessment

This vulnerability could lead to serious security breaches, allowing attackers to access sensitive user data.

Recommendation

It is recommended to update Google Chrome to the latest version to mitigate this vulnerability.

Original NVD description (English source)

Type Confusion in V8 in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS