CVE Catalog
CVE-2023-4428
HighCVSS 8.1Exploitation Probability (EPSS)
Very high risk10.87%
95th percentile - higher than 95% of all known CVEs
Summary
In Google Chrome prior to version 116.0.5845.110, an out of bounds memory access in CSS allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
Risk Assessment
This vulnerability could lead to the disclosure of sensitive user data or allow remote code execution, posing a significant security risk to the organization.
Recommendation
It is recommended to update Google Chrome to the latest version to mitigate this vulnerability and to monitor systems for potential attacks.
Original NVD description (English source)
Out of bounds memory access in CSS in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High)