vulnerability

Ubuntu: (CVE-2023-0137): chromium-browser vulnerability

Try Surface Command

Back to search

Severity	CVSS	Published	Added	Modified
9	(AV:N/AC:M/Au:N/C:C/I:C/A:C)	Jan 10, 2023	Nov 19, 2024	Mar 27, 2026

Severity

CVSS

(AV:N/AC:M/Au:N/C:C/I:C/A:C)

Published

Jan 10, 2023

Added

Nov 19, 2024

Modified

Mar 27, 2026

Description

Heap buffer overflow in Platform Apps in Google Chrome on Chrome OS prior to 109.0.5414.74 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

Solution

ubuntu-upgrade-chromium-browser

References

CVE-2023-0137
https://attackerkb.com/topics/CVE-2023-0137
CWE-787
EUVD-EUVD-2023-12227
https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html
https://crbug.com/1399904
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-12227
https://www.cve.org/CVERecord?id=CVE-2023-0137

NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today