CVE-2023-3420

Type Confusion in V8 in Google Chrome prior to 114.0.5735.198 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page

High · published June 26, 2023

Patch now

High probability of exploitation

CVSS calls it high at 8.8. It sits in the 99.1th percentile for exploit probability.

CVSS v3.1

8.8

EPSS

56%

Percentile

99.1

In the wild

Unconfirmed

What it is

Type Confusion in V8 in Google Chrome prior to 114.0.5735.198 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

The record

Technical detail

CVSS v3.1: 8.8 · HIGH
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0: Not supplied
EPSS: 0.56192 · 99.1th percentile
Published: 2023-06-26T20:40Z

EPSS history

Timeline

26 JUN 20:40Z
Type Confusion in V8 in Google Chrome prior to 114.0.5735.198 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
cvelistv5