CVE-2023-7024

CVE Published 2023-12-21
Related CWE(s) CWE-787: Out-of-bounds Write
Related Vendor(s) debian, fedoraproject, google
Related Product(s) debian_linux, chrome, fedora
Exploitation Reported (CISA KEV) 2024-01-02
CVSS 3 Base Score 8.8 (HIGH)
CVSS 3 Attack Complexity LOW
CVSS 3 Attack Vector NETWORK

Heap buffer overflow in WebRTC in Google Chrome prior to 120.0.6099.129 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Cyber Threat Graph Context

Explore how this CVE relates to the wider threat graph

References