PT-2023-25887 · Google · Google Chrome

Publicado 2023-08-01 · Atualizado 2023-08-04 · CVE-2023-3729

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Google Chrome on ChromeOS versions prior to 115.0.5790.131

Description The issue is related to a use after free in Splitscreen, allowing a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via crafted UI interactions.

Recommendations For versions prior to 115.0.5790.131, update to version 115.0.5790.131 or later to resolve the issue.

Exploit

Correção

Use After Free

Enumeração de Fraquezas

CWE-416

Identificadores relacionados

CVE-2023-3729

Produtos afetados

Google Chrome

Referências · 5

• 🔥 https://crbug.com/1451803 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-3729 · Nota de Segurança
• https://t.me/cvenotify/55773 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-3729 · Aviso do Fabricante
• https://chromereleases.googleblog.com/2023/07/stable-channel-update-for-chromeos.html · Nota