CVE-2023-3497

—

CVSS 3.1

4.6 medium

EPSS

<1%p4

Published

Jul 3, 2023 (Jul 3, 2023)

Modified

Jun 17, 2026

Description

Out of bounds read in Google Security Processor firmware in Google Chrome on Chrome OS prior to 114.0.5735.90 allowed a local attacker to perform denial of service via physical access to the device. (Chromium security severity: Medium)

Vendors: google
Products: chrome
Weakness: CWE-125
Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (0.1%)

In the news0 stories

No ingested article mentions this CVE yet.