CVE-2023-2458

2023-05-1217:36:05

Chrome

www.cve.org

chromeos

camera

google chrome

heap corruption

ui interaction

remote attacker

EPSS

0.022

Percentile

89.5%

JSON

Use after free in ChromeOS Camera in Google Chrome on ChromeOS prior to 113.0.5672.114 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via UI interaction. (Chromium security severity: High)

CNA Affected

[
  {
    "vendor": "Google",
    "product": "Chrome",
    "versions": [
      {
        "version": "113.0.5672.114",
        "status": "affected",
        "lessThan": "113.0.5672.114",
        "versionType": "custom"
      }
    ]
  }
]

References

chromereleases.googleblog.com/2023/05/stable-channel-update-for-chromeos.html

crbug.com/1430692

EPSS

0.022

Percentile

89.5%

JSON

Related for CVELIST:CVE-2023-2458