CVE-2023-6706

Summary

CVE-2023-6706 is a high severity vulnerability affecting FedCM in Google Chrome versions prior to 120.0.6099.109. A use-after-free condition was identified in FedCM, enabling a remote attacker to craft a malicious HTML page. Successful exploitation could result in heap corruption, potentially leading to significant security risks for users who are tricked into engaging in specific UI interactions. Google has released an updated version of Chrome to address this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.