CVE-2023-3731: free in Ash
Use after free in Diagnostics in Google Chrome on ChromeOS prior to 115.0.5790.131 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: High)
Credit
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is CVE-2023-3731?
CVE-2023-3731 is a vulnerability in Google Chrome on ChromeOS prior to version 115.0.5790.131 that allows an attacker to potentially exploit heap corruption via a crafted Chrome Extension.
How severe is CVE-2023-3731?
CVE-2023-3731 has a severity rating of High.
How does CVE-2023-3731 affect Google Chrome?
CVE-2023-3731 affects Google Chrome on ChromeOS prior to version 115.0.5790.131.
How can an attacker exploit CVE-2023-3731?
An attacker can exploit CVE-2023-3731 by convincing a user to install a malicious extension, which can lead to heap corruption.
How can I fix CVE-2023-3731?
To fix CVE-2023-3731, update Google Chrome to version 115.0.5790.131 or later.