CVE-2023-3079

HighCVSS 8.8/10Known exploited (CISA KEV)Last modified Oct 8, 2026

Description

Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-843

Affected software

VendorProductVersions
GoogleChrome>= 114.0.5735.110, < 114.0.5735.110

References

Timeline

Published
Jun 5, 2023
Last modified
Oct 8, 2026
Added to CISA KEV
Jun 7, 2023
NVD status
Analyzed

Related CVEs from 2023

CVE-2023-307905.4MonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the application via CSTI in the `people:id/relatCVE-2023-307914.6Plane version 0.7.1-dev allows an attacker to change the avatar of his profile, which allows uploading files with HTML extension that interpCVE-2023-307926.1Anchor tag hrefs in Lexical prior to v0.10.0 would render javascript: URLs, allowing for cross-site scripting on link clicks in cases where CVE-2023-307957.8A vulnerability has been identified in JT Open (All versions < V11.4), JT Utilities (All versions < V13.4), Parasolid V34.0 (All versions < CVE-2023-307967.8A vulnerability has been identified in JT Open (All versions < V11.4), JT Utilities (All versions < V13.4). The affected applications contaiCVE-2023-307977.5Netflix Lemur before version 1.3.2 used insufficiently random values when generating default credentials. The insufficiently random values mCVE-2023-307987.5There MultipartParser usage in Encode's Starlette python framework before versions 0.25.0 allows an unauthenticated and remote attacker to sCVE-2023-307997.2MikroTik RouterOS stable before 6.49.7 and long-term through 6.48.6 are vulnerable to a privilege escalation issue. A remote and authenticatCVE-2023-30806.1The WP Mail Catcher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an email subject in versions up to, and including,CVE-2023-308007.5The web server used by MikroTik RouterOS version 6 is affected by a heap memory corruption issue. A remote and unauthenticated attacker can CVE-2023-308019.8All versions of the qBittorrent client through 4.5.5 use default credentials when the web user interface is enabled. The administrator is noCVE-2023-308025.3The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to a source code disclosure vulnerability. A remote and unauthent
CVE-2023-3079: High severity, CVSS 8.8 | Vulnix