rewindex

RewindexCVEs

CVE-2023-2136: Google Chrome Skia Integer Overflow Vulnerability

Critical · CVSS 9.6 (CVSS 3.1)KEV known exploitedEPSS 5.7%, 93th percentilePublished Updated Assigner: Chrome

In CISA’s Known Exploited Vulnerabilities catalog: Google Chrome Skia Integer Overflow Vulnerability.

Added , federal remediation due . Known ransomware use: Unknown.

Required action: Apply updates per vendor instructions.

Description

Integer overflow in Skia in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

Vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Status incidents that name it

No tracked status incident names this CVE.

Affected vendors and products

Google: Chrome

References

All CVEsMarkdownJSON