Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
8.8

Chromium may allow remote code execution via malicious webpage

CVE-2023-4763 · published 3 years ago
Summary

The Chromium browser on Debian can be tricked by a specially crafted web page to corrupt its memory, which could let an attacker run code on the user's computer. This issue affects Chromium versions earlier than 116.0.5845.179. Upgrade Chromium to the latest version to protect against this risk.

What to do
  • Update debian chromium to version 116.0.5845.180-1~deb12u1.
  • Update debian chromium to version 116.0.5845.180-1.
  • Update google chrome to version 116.0.5845.179 or later.
Affected software
Ecosystem VendorProductAffected versions
Debian:12 debian chromium < 116.0.5845.180-1~deb12u1
Fix: upgrade to 116.0.5845.180-1~deb12u1
Debian:13 debian chromium < 116.0.5845.180-1
Fix: upgrade to 116.0.5845.180-1
Debian:14 debian chromium < 116.0.5845.180-1
Fix: upgrade to 116.0.5845.180-1
– google chrome < 116.0.5845.179
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
– debian debian_linux 11.0
12.0
cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
Original advisory text
Use after free in Networks in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Use after free in Networks in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
8.8 High
Exploitation
1% chance of attack within 30 days
Type
CWE-416Use After Free
Timeline
Published5 Sep 2023
Updated4 Nov 2026
First seen15 Sep 2026
Sources
DEBIAN-CVE-2023-4763 · OSV
CVE-2023-4763 · NVD
Track software like this
Free during beta