← Database

CVE-2023-0134

HIGH CVSS: 8.8 Published: 2023-01-10 Modified: 2026-06-17

Description

Use after free in Cart in Google Chrome prior to 109.0.5414.74 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via database corruption and a crafted HTML page. (Chromium security severity: Medium)

Affected Platforms

Google Chrome

Weakness Type

CWE-416, CWE-416

References