CVE-2023-4762

Google Chrome, debian_linux, fedoraproject fedora

Published 5 Sept 2023 · updated 17 Jun 2026 · Analyzed

8.8 High · CVSS 3.1, NVD

Exploited in the wild

CISA added this to its Known Exploited Vulnerabilities catalog on 6 Feb 2024, with a remediation deadline of 27 Feb 2024 for US federal agencies.

Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Description

Type Confusion in V8 in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)

References

chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop.html · Vendor Advisory
crbug.com/1473247 · Permissions Required
lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/27NR3KG553CG6LGPMP6SHWEVHTYPL6RC/ · Mailing List
lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T655QF7CQ3DYAMPFV7IECQYGDEUIVVT/ · Mailing List
lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KUQ7CTX3W372X3UY56VVNAHCH6H2F4X3/ · Mailing List
msrc.microsoft.com/update-guide/vulnerability/CVE-2023-4762 · Patch, Third Party Advisory
security.gentoo.org/glsa/202311-11 · Third Party Advisory
security.gentoo.org/glsa/202312-07 · Third Party Advisory
security.gentoo.org/glsa/202401-34 · Third Party Advisory
www.debian.org/security/2023/dsa-5491 · Mailing List, Third Party Advisory
www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-4762 · US Government Resource