CVE-2023-4572: Use after free in MediaStream
Chromium: CVE-2023-4572 Use after free in MediaStream
Other sources
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
— Microsoft
Use after free in MediaStream in Google Chrome prior to 116.0.5845.140 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Credit
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-4572?
The severity of CVE-2023-4572 is high.
What is the affected software?
The affected software includes Microsoft Edge, Microsoft Edge (Chromium-based), and Google Chrome.
How can a remote attacker exploit CVE-2023-4572?
A remote attacker can potentially exploit heap corruption via a crafted HTML page.
What is the recommended remedy for CVE-2023-4572 in Microsoft Edge?
Upgrade Microsoft Edge to version 116.0.1938.69 or later.
What is the recommended remedy for CVE-2023-4572 in Google Chrome?
Upgrade Google Chrome to version 116.0.5845.140 or later.