CVE-2023-2033

KEVHIGH 8.8EPSS 40.8%

Type confusion in V8 in Google Chrome prior to 112.0.5615.121 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVSS v3.1: 8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v3.1: 8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS: 40.80% chance of exploitation in the next 30 days, 99th percentile
CISA KEV: added 2023-04-17
Published: 2023-04-14
Updated: 2025-10-21

Proof-of-concept exploits (4)

insoxin/CVE-2023-20334★ · 2023-04-19
mistymntncop/CVE-2023-203364★ · 2023-08-15
tianstcht/CVE-2023-20330★ · 2023-08-17
rycbar77/V8Exploits

References

Related