{"id":"CVE-2023-2134","published":"2023-04-19T03:40:26Z","modified":"2025-02-13T16:40:11Z","title":"Out of bounds memory access in Service Worker API in Google Chrome prior to 112.0.5615.137 allowed a remote attacker…","vendor":"Google","product":"Chrome","tier":"tail","description":{"text":"Out of bounds memory access in Service Worker API in Google Chrome prior to 112.0.5615.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)","provenance":"source","from":"CVE.org"},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","provenance":"source","from":"CISA ADP Vulnrichment"},"epss":{"score":0.01059,"percentile":0.64397,"provenance":"source"},"cwes":[{"id":"CWE-787","name":"Out-of-bounds Write"}],"references":[{"url":"https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop_18.html","tags":[]},{"url":"https://crbug.com/1429201","tags":[]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FEJZMAUB4XP44HSHEBDWEKFGA7DUHY42/","tags":[]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4AOSGAOPXLBK4A5ZRTVZ4M6QKVLSWMWG/","tags":[]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RJQI63HWZFL6M26Q6UOHKDY6LD2PFC5Z/","tags":[]},{"url":"https://www.debian.org/security/2023/dsa-5393","tags":[]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IHHD6KNH4WLUE6JG6HRQZWNAJMHJ32X7/","tags":[]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SLO7BL2MHZYPY6O3OAEAQL3SKYMGGO6M/","tags":[]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ES2CDRHR2Y4WY6DNDIAPYZFXJU3ZBFAV/","tags":[]},{"url":"https://security.gentoo.org/glsa/202309-17","tags":[]}],"priority":{"score":19.0,"factors":[{"name":"EPSS percentile","points":12.88},{"name":"CVSS severity","points":6.16}]},"vendorSlug":"google","affectedVersions":[{"vendor":"Google","product":"Chrome","versions":[">= 112.0.5615.137, < 112.0.5615.137"]}],"euvd":{"id":"EUVD-2023-33654","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-class-google-chrome-cwe-787"}}