Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in

CVE-2023-3079

🗓️ 05 Jun 2023 21:40:06Reported by ChromeType 
cve
 cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 901 Views

Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page

Related
Detection
Affected
Refs
Social
ReporterTitlePublishedViews
Family
githubexploit
GithubExploit		Exploit for Type Confusion in Google Chrome
15 Aug 202304:16
–githubexploit
freebsd
FreeBSD		chromium -- multiple vulnerabilities
5 Jun 202300:00
–freebsd
freebsd
FreeBSD		electron23 -- multiple vulnerabilities
14 Jun 202300:00
–freebsd
freebsd
FreeBSD		electron22 -- multiple vulnerabilities
14 Jun 202300:00
–freebsd
freebsd
FreeBSD		electron24 -- multiple vulnerabilities
14 Jun 202300:00
–freebsd
ics
ICS		North Korea Cyber Group Conducts Global Espionage Campaign to Advance Regime’s Military and Nuclear Programs
25 Jul 202412:00
–ics
attackerkb
ATTACKERKB		CVE-2023-3079
5 Jun 202300:00
–attackerkb
alpinelinux
AlpineLinux		CVE-2023-3079
5 Jun 202321:40
–alpinelinux
astralinux
AstraLinux		Astra Linux – Vulnerability in Chromium
20 May 202605:53
–astralinux
avleonov
Information Security Automation		Microsoft Patch Tuesday June 2023: Edge type confusion, Git RCE, OneNote Spoofing, PGM RCE, Exchange RCE, SharePoint EoP
25 Jun 202300:35
–avleonov
Rows per page
NVD
Vulners
Node
AND
microsoftwindowsMatch-
googlechromeRange<114.0.5735.110
Node
OR
fedoraprojectfedoraMatch37
fedoraprojectfedoraMatch38
Node
OR
debiandebian_linuxMatch11.0
debiandebian_linuxMatch12.0
Node
AND
googlechromeRange<114.0.5735.110
OR
applemacosMatch-
linuxlinux_kernelMatch-
Node
OR
couchbasecouchbase_serverRange<7.1.5
couchbasecouchbase_serverMatch7.2.0
[
  {
    "vendor": "Google",
    "product": "Chrome",
    "versions": [
      {
        "version": "114.0.5735.110",
        "status": "affected",
        "lessThan": "114.0.5735.110",
        "versionType": "custom"
      }
    ]
  }
]

mistymntncop

CVE-2023-4762 seems to be another hole leaker. A variant of CVE-2023-3079 infact. But the question is how do you actually add the right feedback to the function given the patch for CVE-2023-3079 ??

TodayCyberNews

Google has released a security update to fix 0-day in Chrome 116. CVE-2023-4863, rated as Critical Severity, is described as a heap-based buffer overflow issue in the WebP component that can be used to crash the application and potentially execute arbitrary code. WebP is an image format that provides improved compression and quality over the well-known JPEG and PNG formats and is supported by all modern browsers, including Chrome, Firefox, Safari, Edge and Opera. According to Google , an exploit for CVE-2023-4863 exists and is being used in the wild. ( https://t.co/RqZTdLoBEA ) The vulnerability became known on September 6 after a report from Apple Security Engineering and Architecture (SEAR) and Citizen Lab, which is known to have recently specialized in uncovering the activities of spyware vendors. As usual, Google refrained from providing technical details or the circumstances surrounding the observed exploitation. But given that SEAR and Citizen Lab were behind the disclosure, it is highly likely that the vulnerability was exploited by one of the spyware vendors. Moreover, the Google Chrome patch appeared just a few days after Apple announced a 0-day fix in iOS and macOS, which was discovered by Citizen Lab during an analysis of its exploitation associated with NSO Group's Pegasus spyware. CVE-2023-4863 is the fourth 0-day patched by Google in Chrome this year, following CVE-2023-3079 (V8 engine type confusion) in June, as well as CVE-2023-2033 (V8 engine type confusion ) and CVE-2023-2136 (integer overflow in Skia) in April. The latest version of Chrome is now available to users as version 116.0.5845.187 for macOS and Linux and as version 116.0.5845.187/.188 for Windows. Check Out Old Tweets Of /TodayCyberNews #CyberSecurity #redteam #infosec #hackers

mistymntncop

Fascinating. CVE-2022-4262 - Variston CVE-2023-2033 - Intellexa CVE-2023-3079 - Intellexa But who was behind CVE-2023-4762 (CVE-2023-3079 variant) I wonder?

theori_io

We've started a blog series on N-day full chain exploits. The first part is about chrome renderer exploit, CVE-2023-3079. Check it now! https://t.co/JTU6RZD2g4 #Theori /hashtag/티오리?src=hashtag_click #Blog #Research #Fermium252 #Chrome #VirtualMachine #CVE #Vulnerability

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
17 Jun 2026 06:13Current
8.6High risk
Vulners AI Score8.6
CVSS 3.18.8
EPSS0.3211
SSVC
CWE-843In Wild
cve-2023-3079v8google chrometype confusionremote attackerexploitheap corruptionhtml pagesecurity vulnerability
901