CVE-2023-3731

2023-08-0122:39:17

Chrome

www.cve.org

google chrome

chromeos

diagnostics

use after free

heap corruption

malicious extension

chrome extension

cve-2023-3731

high severity

0.001 Low

EPSS

Percentile

30.3%

JSON

Use after free in Diagnostics in Google Chrome on ChromeOS prior to 115.0.5790.131 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: High)

CNA Affected

[
  {
    "vendor": "Google",
    "product": "Chrome",
    "versions": [
      {
        "version": "115.0.5790.131",
        "status": "affected",
        "lessThan": "115.0.5790.131",
        "versionType": "custom"
      }
    ]
  }
]

References

chromereleases.googleblog.com/2023/07/stable-channel-update-for-chromeos.html

crbug.com/1441306

0.001 Low

EPSS

Percentile

30.3%

JSON

Related for CVELIST:CVE-2023-3731