CVE-2023-2033
HIGH KEVGoogle Chrome < 112.0.5615.121 - Remote Code Execution via V8 Type Confusion
Title source: llmExploitation Summary
CVE-2023-2033 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added April 17, 2023. EIP tracks 6 public exploits from researchers including mistymntncop, sandumjacob, insoxin.
AI-analyzed exploit summary This is a working exploit PoC for CVE-2023-2033, targeting a type confusion vulnerability in V8's TurboFan JIT compiler. It leverages 'The Hole' object to achieve memory corruption and arbitrary read/write primitives.
Description
Type confusion in V8 in Google Chrome prior to 112.0.5615.121 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Exploits (6)
This is a working exploit PoC for CVE-2023-2033, targeting a type confusion vulnerability in V8's TurboFan JIT compiler. It leverages 'The Hole' object to achieve memory corruption and arbitrary read/write primitives.
This repository contains a working proof-of-concept for CVE-2023-2033, a vulnerability in V8's stack trace handling. The PoC includes test cases to demonstrate the behavior of stack traces with proxies and error objects, highlighting the vulnerability's impact.
The repository contains only a README.md file with minimal information, lacking any exploit code or technical details for CVE-2023-2033.
The repository contains only a README.md file with a placeholder message 'coming soon' and no actual exploit code or technical details. No functional PoC or exploit is present.
The repository contains functional exploit code for CVE-2023-2033, demonstrating a V8 engine vulnerability. The PoC leverages memory corruption techniques (e.g., arbitrary read/write primitives) to achieve remote code execution (RCE) in a Chrome/Chromium environment.
References (12)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H