PT-2023-25887 · Google · Google Chrome

Published 2023-08-01 · Updated 2023-08-04 · CVE-2023-3729

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Google Chrome on ChromeOS versions prior to 115.0.5790.131

Description The issue is related to a use after free in Splitscreen, allowing a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via crafted UI interactions.

Recommendations For versions prior to 115.0.5790.131, update to version 115.0.5790.131 or later to resolve the issue.

Exploit

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2023-3729

Affected Products

Google Chrome

References · 5

• 🔥 https://crbug.com/1451803 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-3729 · Security Note
• https://osv.dev/vulnerability/CVE-2023-3729 · Vendor Advisory
• https://t.me/cvenotify/55773 · Telegram Post
• https://chromereleases.googleblog.com/2023/07/stable-channel-update-for-chromeos.html · Note