CVE-2023-3215

CVSS 3.0 Score 7.5 of 10 (high)

Details

Published Jun 13, 2023
Updated: Jan 31, 2024
CWE ID 787

Summary

CVE-2023-3215 is a high-severity vulnerability affecting Google Chrome versions prior to 114.0.5735.133. This issue involves a use-after-free condition in WebRTC, which can lead to heap corruption. A remote attacker could potentially exploit this vulnerability by crafting a malicious HTML page, taking advantage of the memory corruption to execute arbitrary code or cause denial-of-service conditions. This vulnerability poses a significant risk to users browsing untrusted websites and should be addressed by updating to the latest version of Google Chrome.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share