← Database

CVE-2023-2461

HIGH CVSS: 8.8 Published: 2023-05-03 Modified: 2026-06-17

Description

Use after free in OS Inputs in Google Chrome on ChromeOS prior to 113.0.5672.63 allowed a remote attacker who convinced a user to enage in specific UI interaction to potentially exploit heap corruption via crafted UI interaction. (Chromium security severity: Medium)

Affected Platforms

Debian Debian LinuxFedoraproject FedoraGoogle Chrome OsGoogle Chrome

Weakness Type

CWE-416, CWE-416

References