CVE-2023-2134

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Out of bounds memory access in Service Worker API in Google Chrome prior to 112.0.5615.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Apr 19, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-213405.5In Telecomm, there is a possible way to get the call state due to a missing permission check. This could lead to local information disclosurCVE-2023-213417.8In Permission Manager, there is a possible way to bypass required permissions due to a missing permission check. This could lead to local esCVE-2023-213427.8In RemoteSpeechRecognitionService of RemoteSpeechRecognitionService.java, there is a possible way to launch an activity from the background CVE-2023-213437.8In ActivityStarter, there is a possible background activity launch due to an unsafe PendingIntent. This could lead to local escalation of prCVE-2023-213445.5In Job Scheduler, there is a possible way to determine whether an app is installed, without query permissions, due to side channel informatiCVE-2023-213453.3In Game Manager Service, there is a possible way to determine whether an app is installed, without query permissions, due to side channel inCVE-2023-213463.3In the Device Idle Controller, there is a possible way to determine whether an app is installed, without query permissions, due to side chanCVE-2023-213477.5In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with noCVE-2023-213483.3In Window Manager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel informatCVE-2023-213493.3In Package Manager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel informaCVE-2023-21357.5Use after free in DevTools in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who convinced a user to enable specific preconCVE-2023-213505.5In Media Projection, there is a possible way to determine whether an app is installed, without query permissions, due to side channel inform
CVE-2023-2134: High severity, CVSS 8.8 | Vulnix