CVE-2023-4762: Google Chromium V8 Type Confusion Vulnerability
Vulnerability summary
CVE-2023-4762 is a high (CVSS 8.8) Type Confusion vulnerability in Google Chromium V8. It is known to be exploited: CISA lists it, first on 06-02-2024. EPSS estimates a 41.38% chance of exploitation in the next 30 days, higher than 98.6% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 5 · Related 3Timeline
- 05-09-2023PublishedVulnerability first disclosed.
- 06-02-2024Added to CISA KEVGoogle Chromium V8 Type Confusion Vulnerability
- 27-02-2024CISA remediation dueApply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- 21-10-2025Last modifiedVulnerability information updated.
Description
Type Confusion in V8 in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)
CVSS metrics
3 scores · 3 sources · 1 version- OSV · DebianEcosystem advisory · calculated8.8HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- NVDNIST8.8HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS trend
Probability
41.38%
Chance of exploitation in the next 30 days
Percentile
99%
Versus all other CVEs
30-day change
+0.29 pp
From 41.08% on 19-09-2026
Known exploited
Compare KEV catalogs
CISA KEVListed- Added
- 06-02-2024
- Federal due date
- 27-02-2024
CISA required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop.html nvd.nist.gov/vuln/detail/CVE-2023-4762
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Debian2 products
- chromium< 116.0.5845.180-1~deb12u1 | < 116.0.5845.180-1
- debian_linuxEOL11.0 | 12.0
Fedoraproject1 product
- fedoraEOL37 | 38 | 39
Google1 product
- chrome≥ 116.0.5845.179, < 116.0.5845.179 | < 116.0.5845.179
Microsoft1 product
- edge_chromium< 116.0.1938.76
4 vendors · 5 products
References
12 links- crbug.com/1473247Permissions Required
- lists.fedoraproject.org/archives/…Mailing List
- lists.fedoraproject.org/archives/…Mailing List
- lists.fedoraproject.org/archives/…Mailing List
- security.gentoo.org/glsa/202311-11Third Party Advisory
- security.gentoo.org/glsa/202312-07Third Party Advisory
- security.gentoo.org/glsa/202401-34Third Party Advisory
Show all 12 references
- www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-4762Government ResourceUS Government Resource