Threat database

Heap buffer overflow in WebRTC in Google Chrome prior to 120.0.6099.129 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVE-2023-5997 is a use-after-free vulnerability in the garbage collection mechanism of Google Chrome versions prior to 119.0.6045.159. This flaw allows a remote attacker to trigger heap corruption by crafting a malicious HTML page, potentially leading to arbitrary code execution or browser compromise. Exploitation does not require user authentication but does require user interaction to visit a malicious webpage. No known exploits are currently in the wild. The vulnerability affects a widely used browser, making it a significant risk for European organizations relying on Chrome for web access. Timely patching is critical to prevent exploitation. The severity is assessed as high due to the potential impact on confidentiality, integrity, and availability, combined with the ease of exploitation via web content.