Google Chrome Security Update – 19 April 2023

The addressed vulnerabilities could allow the remote attacker to gain access, execute arbitrary code on the system, or trigger a buffer overflow by persuading the victim to visit a specially crafted webpage.

Sample of the addressed vulnerabilities:

1. Google Chrome Code Execution Vulnerability (CVE-2023-2133):

• CVSS: 8.8
• Attack Vector: Network
• Attack Complexity: Low
• Privileges Required: None
• User Interaction: Required
• Consequences: Gain Access

2. Google Chrome Integer Overflow Vulnerability (CVE-2023-2136):

• CVSS: 8.8
• Attack Vector: Network
• Attack Complexity: Low
• Privileges Required: None
• User Interaction: Required
• Consequences: Gain Access

It should be highlighted that Google is aware that an exploit for “CVE-2023-2136” exists in the wild.