CVE-2023-3730: Use after free in Tab Groups

Reference Links

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-3730 (Advisory)
• https://chromereleases.googleblog.com/2023/07/stable-channel-update-for-desktop.html (Advisory)
• https://crbug.com/1453465
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PQKT7EGDD2P3L7S3NXEDDRCPK4NNZNWJ/
• https://security.gentoo.org/glsa/202401-34

Parent vulnerabilities

(Appears in the following advisories)

• 1127106949487312592

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2023-3727
• CVE-2023-3728
• CVE-2023-3732
• CVE-2023-4860
• CVE-2023-3733
• CVE-2023-3734
• CVE-2023-3735
• CVE-2023-3736
• CVE-2023-3737
• CVE-2023-3738
• CVE-2023-3740

Frequently Asked Questions

• What is CVE-2023-3730?

  CVE-2023-3730 is a vulnerability in Chromium that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page.

• What is the severity of CVE-2023-3730?

  CVE-2023-3730 has a severity rating of High (8.8) according to Chromium security severity.

• How can CVE-2023-3730 be exploited?

  CVE-2023-3730 can be exploited by convincing a user to engage in specific UI interactions with a crafted HTML page.

• Which software versions are affected by CVE-2023-3730?

  Google Chrome prior to version 115.0.5790.98 and Microsoft Edge (Chromium-based) prior to version 115.0.1901.183 are affected by CVE-2023-3730.

• How can I fix CVE-2023-3730?

  To fix CVE-2023-3730, update Google Chrome to version 115.0.5790.98 or later and update Microsoft Edge (Chromium-based) to version 115.0.1901.183 or later.