- 91/2023
- High
Google has released an updated Chrome version (112.0.5615.121) for Windows, Linux, and Mac to fix a zero-day vulnerability.
The zero-day vulnerability could allow the remote attacker to execute arbitrary code on the affected system by persuading the victim to visit a specially crafted web page with an unknown input which leads to a type of confusion vulnerability in the V8 JavaScript component.
Google Chrome V8 Code Execution (CVE-2023-2033):
- CVSS: 8.8
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: Required
- Consequences: Gain Access
It should be highlighted that Google is aware that an exploit for CVE-2023-2033 exists in the wild.
Vulnerabilities
CVE-2023-2033
Mitigations
The enterprise should deploy this patch as soon as the testing phase is completed.