CVE-2023-0474

Description

Use after free in GuestView in Google Chrome prior to 109.0.5414.119 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a Chrome web app. (Chromium security severity: Medium)

Reserved 2023-01-24 | Published 2023-01-24 | Updated 2024-10-17 | Assigner Chrome

Problem types

Use after free

Product status

Any version before 109.0.5414.119
affected

References

chromereleases.googleblog.com/...-update-for-desktop_24.html

crbug.com/1400841

cve.org (CVE-2023-0474)

nvd.nist.gov (CVE-2023-0474)

Download JSON