Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-65152
HistoryAug 17, 2023 - 12:00 a.m.

Google Chrome Extensions Memory Misreference Vulnerability (CNVD-2023-65152)

2023-08-1700:00:00
China National Vulnerability Database
www.cnvd.org.cn
3
google chrome
memory misreference
vulnerability
remote attacker
heap corruption
malicious extensions
html page
cnvd-2023-65152

0.001 Low

EPSS

Percentile

39.3%

Google Chrome is a web browser from Google, an American company. A memory misreference vulnerability exists in versions of Google Chrome prior to 116.0.5845.96, which stems from a mix-up of instructions responsible for freeing memory in Extensions. A remote attacker can exploit this vulnerability to trick users into installing malicious extensions by exploiting heap corruption via a crafted HTML page.

CPENameOperatorVersion
google chrome <116.eq0.5845.96