CVE-2023-2933: Use after free in PDF

Reference Links

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-2933 (Advisory)
• https://security-tracker.debian.org/tracker/CVE-2023-2933
• https://chromereleases.googleblog.com/2023/05/stable-channel-update-for-desktop_30.html (Advisory)
• https://crbug.com/1445426
• https://security.gentoo.org/glsa/202311-11
• https://www.debian.org/security/2023/dsa-5418
• https://security.gentoo.org/glsa/202401-34

Parent vulnerabilities

(Appears in the following advisories)

• 77713930894877776

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2023-2929
• CVE-2023-2930
• CVE-2023-3598
• CVE-2023-2931
• CVE-2023-2932
• CVE-2023-2934
• CVE-2023-2935
• CVE-2023-2936
• CVE-2023-2937
• CVE-2023-2938
• CVE-2023-2939
• CVE-2023-2940
• CVE-2023-2941

Frequently Asked Questions

• What is the severity of CVE-2023-2933?

  CVE-2023-2933 has been classified as a high-severity vulnerability due to a use-after-free flaw in the Chromium codebase.

• How do I fix CVE-2023-2933?

  To fix CVE-2023-2933, update your Chrome or Edge browser to the latest version: 114.0.5735.90 or later for Chrome and 114.0.1823.37 or later for Edge.

• Which software is affected by CVE-2023-2933?

  CVE-2023-2933 affects Google Chrome versions up to 114.0.5735.90 and Microsoft Edge versions up to 114.0.1823.37.

• When was CVE-2023-2933 discovered?

  CVE-2023-2933 was disclosed and addressed in updates released in May 2023.

• What type of vulnerability is CVE-2023-2933?

  CVE-2023-2933 is a use-after-free vulnerability that can potentially allow an attacker to execute arbitrary code.