CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
Confidence
High
EPSS
Percentile
54.8%
chromium is vulnerable to Use After Free. The vulnerability is due to improper memory management in Media Stream in Google Chrome. This allows an attacker to potentially exploit heap corruption via a crafted HTML page.
chromereleases.googleblog.com/2023/12/stable-channel-update-for-desktop.html
crbug.com/1497984
lists.fedoraproject.org/archives/list/[email protected]/message/MMHY76AWPA46MAFXPWDGJX6FEGXZVR5Z/
lists.fedoraproject.org/archives/list/[email protected]/message/RI3UHCTFH6KWAJGDZ2TOLT6VHKW53WCC/
security-tracker.debian.org/tracker/CVE-2023-6508
security.gentoo.org/glsa/202401-34
www.debian.org/security/2023/dsa-5573
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
Confidence
High
EPSS
Percentile
54.8%