CVE-2023-4860

CRITICAL

Google Chrome <115.0.5790.98 - Sandbox Escape

Title source: llm

Description

Inappropriate implementation in Skia in Google Chrome prior to 115.0.5790.98 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

References (2)

[Release Notes] https://chromereleases.googleblog.com/2023/07/stable-channel-update-for-desktop.html

[Permissions Required] https://issues.chromium.org/issues/40064341

Scores

CVSS v3 9.6

EPSS 0.0035

EPSS Percentile 57.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Classification

CWE

CWE-303

Status published

Affected Products (1)

google/chrome < 115.0.5790.98

Timeline

Published Jul 16, 2024

Tracked Since Feb 18, 2026