CVE-2023-1235

Summary

Type confusion in DevTools in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted UI interaction. (Chromium security severity: Low)

Affected Software

VendorProductVersion RangeStatus
GoogleChrome111.0.5563.64 < 111.0.5563.64affected

Weaknesses

  • Type Confusion

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References