CVE-2023-4427

high-risk

Published 2023-08-23

Out of bounds memory access in V8 in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High)

Do I need to act?

79.3% chance of exploitation in next 30 days

EPSS score — higher than 21% of all CVEs

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 8.1/10 High

NETWORK / LOW complexity

Affected Products (4)

Chrome

Fedora

Affected Vendors

Google Fedoraproject

References (16)

Third Party Advisory http://packetstormsecurity.com/files/174951/Chrome-ReduceJSLoadPropertyWithEnume...

Release Notes https://chromereleases.googleblog.com/2023/08/chrome-desktop-stable-update.html

Permissions Required https://crbug.com/1470668

Mailing List https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproje...

https://security.gentoo.org/glsa/202401-34

Third Party Advisory https://www.debian.org/security/2023/dsa-5483

Third Party Advisory http://packetstormsecurity.com/files/174951/Chrome-ReduceJSLoadPropertyWithEnume...

Release Notes https://chromereleases.googleblog.com/2023/08/chrome-desktop-stable-update.html

Permissions Required https://crbug.com/1470668

Mailing List https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproje...

https://security.gentoo.org/glsa/202401-34

Third Party Advisory https://www.debian.org/security/2023/dsa-5483

/ 100

high-risk

Severity 28/34 · Critical

Exploitability 20/34 · Moderate

Exposure 10/34 · Low