CVE-2023-6702

🗓️ 14 Dec 2023 21:48:41Reported by ChromeType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 155 Views

Type confusion in V8 in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High

Reporter	Title	Published	Views	Family All 327
FreeBSD	electron26 -- multiple vulnerabilities	4 Jan 202400:00	–	freebsd
FreeBSD	chromium -- multiple security fixes	12 Dec 202300:00	–	freebsd
FreeBSD	qt5-webengine -- Multiple vulnerabilities	8 Jan 202400:00	–	freebsd
FreeBSD	qt6-webengine -- Multiple vulnerabilities	8 Jan 202400:00	–	freebsd
FreeBSD	electron27 -- multiple vulnerabilities	4 Jan 202400:00	–	freebsd
AlpineLinux	CVE-2023-6702	14 Dec 202321:48	–	alpinelinux
AstraLinux	Astra Linux - уязвимость в chromium	3 May 202623:59	–	astralinux
Circl	CVE-2023-6702	10 Jan 202409:37	–	circl
CNNVD	Google Chrome Security Vulnerability	12 Dec 202300:00	–	cnnvd
Cvelist	CVE-2023-6702	14 Dec 202321:48	–	cvelist

NVD

Vulners

Node

google chromeRange<120.0.6099.109

Node

fedoraproject fedoraMatch38

Node

microsoft edge_chromiumRange<120.0.2210.77

[
  {
    "vendor": "Google",
    "product": "Chrome",
    "versions": [
      {
        "version": "120.0.6099.109",
        "status": "affected",
        "lessThan": "120.0.6099.109",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
security	www.security.gentoo.org/glsa/202401-34
crbug	www.crbug.com/1501326
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/6NWZ23ZJ62XKWVNGHSIZQYILVJWH5BLI/
chromereleases	www.chromereleases.googleblog.com/2023/12/stable-channel-update-for-desktop_12.html
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/ZGJ732QHS2FAYF62RFF3YP4VIQY75K7V/

04 Nov 2025 19:16Current

8.4High risk

Vulners AI Score8.4

CVSS 3.18.8

EPSS0.57947

SSVC

CWE-843

cve-2023-6702 v8 google chrome heap corruption type confusion remote attacker exploit html page chromium security severity high