CVE-2023-4572

HIGH8.8EPSS 0.32%

chromium - security update

Published: 8/29/2023Modified: 3/9/2026

Also known as:DSA-5487-1DEBIAN-CVE-2023-4572

Description

Use after free in MediaStream in Google Chrome prior to 116.0.5845.140 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Affected packages (2)

Debian/chromiumfrom 0, < 116.0.5845.140-1~deb11u1
Debian/chromiumfrom 0, < 116.0.5845.140-1~deb11u1

CVSS scores

Source	Version	Severity	Vector
osv	CVSS 3.1	HIGH8.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References (1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2023-4572