CVE-2023-2312: Use after free in Offline
Chromium: CVE-2023-2312 Use after free in Offline
Other sources
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
— Microsoft
Use after free in Offline in Google Chrome on Android prior to 116.0.5845.96 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Credit
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2023-4369
- CVE-2023-20593
- CVE-2023-4211
- CVE-2023-4128
- CVE-2023-4147
- CVE-2023-3390
- CVE-2023-32804
- CVE-2022-40982
- CVE-2023-4349
- CVE-2023-4350
- CVE-2023-4351
- CVE-2023-4352
- CVE-2023-4353
- CVE-2023-4354
- CVE-2023-4355
- CVE-2023-4356
- CVE-2023-4357
- CVE-2023-4358
- CVE-2023-4359
- CVE-2023-4360
- CVE-2023-4361
- CVE-2023-4362
- CVE-2023-4363
- CVE-2023-4364
- CVE-2023-4365
- CVE-2023-4366
- CVE-2023-4367
- CVE-2023-4368
- CVE-2023-21264
- CVE-2020-29374
Frequently Asked Questions
What is CVE-2023-2312?
CVE-2023-2312 is a vulnerability in Chromium that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page.
What is the severity of CVE-2023-2312?
CVE-2023-2312 has a severity rating of High (8.8) according to the Chromium security severity scale.
Which software is affected by CVE-2023-2312?
Microsoft Edge (Chromium-based) prior to version 116.0.5845.96, Microsoft Edge prior to version 116.0.1938.54, and Google Chrome prior to version 116.0.5845.96 are affected by CVE-2023-2312.
How can I fix CVE-2023-2312?
To fix CVE-2023-2312, update your software to Microsoft Edge version 116.0.5845.96, Microsoft Edge (Chromium-based) version 116.0.1938.54, or Google Chrome version 116.0.5845.96.
Where can I find more information about CVE-2023-2312?
You can find more information about CVE-2023-2312 in the references provided: [Microsoft Security Response Center](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-2312), [Google Chrome Releases](https://chromereleases.googleblog.com/2023/08/stable-channel-update-for-desktop_15.html), [Chromium Bug Tracker](https://crbug.com/1448548).