{"id":"CVE-2023-3079","title":"Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page","summary":"Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)","severity":"high","cvss":8.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-843","CWE-843"],"vendor":"google","product":"chrome","affected":["chrome < 114.0.5735.110","fedora = 37","fedora = 38","debian_linux = 11.0","debian_linux = 12.0","couchbase_server < 7.1.5","couchbase_server = 7.2.0"],"patched":["chrome 114.0.5735.110","couchbase_server 7.1.5"],"published":"2023-06-05","updated":"2026-10-08","sourceUpdated":"2026-10-08T18:04:20.770","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2023-3079","references":[{"url":"http://packetstormsecurity.com/files/176211/Chrome-V8-Type-Confusion.html","label":"chrome-cve-admin@google.com"},{"url":"http://packetstormsecurity.com/files/176212/Chrome-V8-Type-Confusion-New-Sandbox-Escape.html","label":"chrome-cve-admin@google.com"},{"url":"https://chromereleases.googleblog.com/2023/06/stable-channel-update-for-desktop.html","label":"chrome-cve-admin@google.com"},{"url":"https://crbug.com/1450481","label":"chrome-cve-admin@google.com"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DYTXO5E3FI3I2ETDP3HF4SHYYTFMKMIC/","label":"chrome-cve-admin@google.com"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U4OXTNIZY4JYHJT7CVLPAJQILI6BISVM/","label":"chrome-cve-admin@google.com"},{"url":"https://security.gentoo.org/glsa/202311-11","label":"chrome-cve-admin@google.com"},{"url":"https://security.gentoo.org/glsa/202401-34","label":"chrome-cve-admin@google.com"},{"url":"https://www.couchbase.com/alerts/","label":"chrome-cve-admin@google.com"},{"url":"https://www.debian.org/security/2023/dsa-5420","label":"chrome-cve-admin@google.com"},{"url":"http://packetstormsecurity.com/files/176211/Chrome-V8-Type-Confusion.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.com/files/176212/Chrome-V8-Type-Confusion-New-Sandbox-Escape.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://chromereleases.googleblog.com/2023/06/stable-channel-update-for-desktop.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://crbug.com/1450481","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DYTXO5E3FI3I2ETDP3HF4SHYYTFMKMIC/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U4OXTNIZY4JYHJT7CVLPAJQILI6BISVM/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/202311-11","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/202401-34","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.couchbase.com/alerts/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.debian.org/security/2023/dsa-5420","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-3079","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"tags":["nvd","kev","in-the-wild","exploit-available"],"epss":0.3211,"epssPercentile":0.98278,"kev":true,"kevDateAdded":"2023-06-07","kevDueDate":"2023-06-28","kevRansomware":false,"exploited":true,"exploits":{"github":1,"githubRepos":["https://github.com/mistymntncop/CVE-2023-3079"],"checkedAt":"2026-10-08T18:58:46.820Z"},"exploitAvailable":true,"ingestedAt":"2026-10-08T18:58:11.291Z","slug":"CVE-2023-3079","body":"## Overview\n\nType confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)\n\n## Affected\n\n- `chrome < 114.0.5735.110`\n- `fedora = 37`\n- `fedora = 38`\n- `debian_linux = 11.0`\n- `debian_linux = 12.0`\n- `couchbase_server < 7.1.5`\n- `couchbase_server = 7.2.0`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `chrome 114.0.5735.110`\n- `couchbase_server 7.1.5`","depth":"abyssal","depthScore":80,"depthScoreParts":{"impact":48.4,"likelihood":6.4,"exploitation":25,"ransomware":0},"changes":[]}