CVE-2023-3728

CVSS 3.1: 8.8 high
EPSS: <1%p53
Published: Aug 1, 2023 · Aug 1, 2023
Modified: Jun 17, 2026

Analyze CVE-2023-3728 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Use after free in WebRTC in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Vendors: google

Products: chrome

Weakness: CWE-416

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news

1 story

It’s a hot 0-day summer for Apple, Google, and Microsoft security fixes

Ars Technica · SecurityAug 1, 17:55 UTC · Aug 1, 2023Exploit / PoCCVE-2023-37450 CVE-2023-36884 CVE-2023-32046+184