cve/2023/CVE-2023-1235.md

20 lines
823 B
Markdown
Raw Normal View History

2024-05-25 21:48:12 +02:00
### [CVE-2023-1235](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1235)
![](https://img.shields.io/static/v1?label=Product&message=Chrome&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=111.0.5563.64%3C%20111.0.5563.64%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=Type%20Confusion&color=brighgreen)
### Description
Type confusion in DevTools in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted UI interaction. (Chromium security severity: Low)
### POC
#### Reference
No PoCs from references.
#### Github
- https://github.com/ARPSyndicate/cvemon
- https://github.com/anthonyharrison/lib4sbom
- https://github.com/espressif/esp-idf-sbom