CVE-2021-4078

Description

Type confusion in V8 in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Risk Information

Base Score
8.8
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
1.446

Associated Vulnerability

VulnerabilityOS Platform
Multiple vulnerabilities fixed in Google Chrome (x64) (96.0.4664.93)Windows
Multiple vulnerabilities fixed in Google Chrome (96.0.4664.93)Windows
Multiple vulnerabilities are fixed in Google Chrome For Mac 96.0.4664.93Mac
chromium security update(DSA-5046-1) chromium_97.0.4692.71-0.1~deb11u1_amd64.debLinux

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-322711Google Chrome (x64) (96.0.4664.93)
PATCH-322710Google Chrome (96.0.4664.93)
PATCH-609673Google Chrome for Mac (132.0.6834.83, 132.0.6834.84)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234