Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2023-4366

Опубликовано: 15 авг. 2023
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 8.8

Описание

Use after free in Extensions in Google Chrome prior to 116.0.5845.96 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

not-affected

code not present
esm-infra/focal

DNE

focal was not-affected [code not present]
focal

not-affected

code not present
jammy

not-affected

code not present
lunar

not-affected

code not present
trusty

ignored

end of standard support
upstream

released

xenial

ignored

end of standard support

Показывать по

EPSS

Процентиль: 33%
0.00133
Низкий

8.8 High

CVSS3

Связанные уязвимости

CVSS3: 8.8
nvd
больше 2 лет назад

Use after free in Extensions in Google Chrome prior to 116.0.5845.96 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

msrc
больше 2 лет назад

Chromium: CVE-2023-4366 Use after free in Extensions

CVSS3: 8.8
debian
больше 2 лет назад

Use after free in Extensions in Google Chrome prior to 116.0.5845.96 a ...

CVSS3: 8.8
github
больше 2 лет назад

Use after free in Extensions in Google Chrome prior to 116.0.5845.96 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

CVSS3: 8.8
fstec
больше 2 лет назад

Уязвимость компонента Extensions API браузера Google Chrome, позволяющая нарушителю установить произвольное расширение

EPSS

Процентиль: 33%
0.00133
Низкий

8.8 High

CVSS3