CVE-2023-4075

HighCVSS 8.8

Published: 03/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.22%

65th percentile - higher than 65% of all known CVEs

Summary

A use after free vulnerability in the Cast component of Google Chrome prior to version 115.0.5790.170 allows a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Risk Assessment

This vulnerability could lead to serious security issues, including the potential for an attacker to gain control over the system.

Recommendation

It is recommended to update Google Chrome to the latest version to mitigate this vulnerability.

Other vulnerabilities in Google Chrome (Cast component)

CVE-2026-6317High
In Google Chrome prior to version 147.0.7727.101, there was a use after free vulnerability in the Cast component that allowed a remote attacker to execute arbitrary code via a crafted HTML page.

Original NVD description (English source)

Use after free in Cast in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)