CVE-2023-3079: Type Confusion in V8
Chromium: CVE-2023-3079 Type Confusion in V8
Other sources
Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
— CISA
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. Google is aware that an exploit for CVE-2023-3079 exists in the wild.
Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Credit
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/chromiumto a version that resolves this vulnerability.Fixed in 116.0.5845.180-1~deb11u1Fixed in 120.0.6099.129-1~deb11u1Fixed in 119.0.6045.199-1~deb12u1Fixed in 120.0.6099.129-1~deb12u1Fixed in 120.0.6099.129-1 - Upgrade
Upgrade
Google Chrome (Trace Event)to a version that resolves this vulnerability.Fixed in 114.0.5735.106 - Upgrade
Upgrade
Google Chrome (V8)to a version that resolves this vulnerability.Fixed in 114.0.5735.110
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is CVE-2023-3079?
CVE-2023-3079 is a type confusion vulnerability in the V8 engine of Google Chromium, allowing a remote attacker to potentially exploit heap corruption via a crafted HTML page.
How severe is CVE-2023-3079?
CVE-2023-3079 has a severity rating of 8.8 (High).
Which software products are affected by CVE-2023-3079?
CVE-2023-3079 affects Google Chromium V8 Engine, Microsoft Edge (Chromium-based), Microsoft Edge, Google Chrome, Fedora, and Debian Linux.
How can I fix CVE-2023-3079?
To fix CVE-2023-3079, users should update their Google Chrome browser to version 114.0.5735.110 or later.
Where can I find more information about CVE-2023-3079?
More information about CVE-2023-3079 can be found in the following references: [Google Chrome Release Blog](https://chromereleases.googleblog.com/2023/06/stable-channel-update-for-desktop.html), [Microsoft Security Response Center](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-3079), and [Chromium Bug Tracker](https://crbug.com/1450481).