Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
8.8

Chromium on Debian may let crafted web page corrupt memory

CVE-2023-3420 · published 3 years ago
Summary

A flaw in the Chromium browser used on Debian can be triggered by a specially crafted web page, potentially corrupting the program's memory. This could lead to crashes or allow an attacker to run unwanted code on the affected system. Updating Chromium to the latest version resolves the issue.

What to do
  • Update debian chromium to version 114.0.5735.198-1~deb12u1.
  • Update debian chromium to version 114.0.5735.198-1.
  • Update google chrome to version 114.0.5735.198 or later.
Affected software
Ecosystem VendorProductAffected versions
Debian:12 debian chromium < 114.0.5735.198-1~deb12u1
Fix: upgrade to 114.0.5735.198-1~deb12u1
Debian:13 debian chromium < 114.0.5735.198-1
Fix: upgrade to 114.0.5735.198-1
Debian:14 debian chromium < 114.0.5735.198-1
Fix: upgrade to 114.0.5735.198-1
– google chrome < 114.0.5735.198
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
– debian debian_linux 11.0
12.0
cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
Original advisory text
Type Confusion in V8 in Google Chrome prior to 114.0.5735.198 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Type Confusion in V8 in Google Chrome prior to 114.0.5735.198 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
8.8 High
Exploitation
56% chance of attack within 30 days
Type
CWE-843Type Confusion
Timeline
Published26 Jun 2023
Updated30 Sep 2026
First seen15 Sep 2026
Sources
DEBIAN-CVE-2023-3420 · OSV
CVE-2023-3420 · NVD
Track software like this
Free during beta