CVE-2023-7024

CVE Published 2023-12-21
Related CWE(s) CWE-787: Out-of-bounds Write
Related Vendor(s) fedoraproject, debian, google
Related Product(s) fedora, chrome, debian_linux
Exploitation Reported (CISA KEV) 2024-01-02
CVSS 3 Base Score 8.8 (HIGH)
CVSS 3 Attack Complexity LOW
CVSS 3 Attack Vector NETWORK

Heap buffer overflow in WebRTC in Google Chrome prior to 120.0.6099.129 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Cyber Threat Graph Context

Explore how this CVE relates to the wider threat graph

References