Skip to content
OpenAdvisories
High · 8.8 CVE-2023-2725 EUVD-2023-34189GHSA-c4fp-wmv9-q4cr

Use after free in Guest View in Google Chrome prior to 113.0.5672.126 allowed an attacker who convinced a user to install a malicious exten…

Published May 16, 2023 · Updated May 5, 2025 · Assigned by Chrome

Vendor: Google Product: Chrome Package: chromium Category: Browsers Ecosystem: Debian

Description

Use after free in Guest View in Google Chrome prior to 113.0.5672.126 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Affected products

VendorProductAffectedFixed
Google Chrome 113.0.5672.126 – < 113.0.5672.126 113.0.5672.126

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 chromium 113.0.5672.126-1 —
Debian 13 chromium 113.0.5672.126-1 —
Debian 12 chromium 113.0.5672.126-1 —
Debian 11 chromium 113.0.5672.126-1~deb11u1 DSA-5404-1

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SUSE Package Hub 15 SP4 chromium 113.0.5672.126-bp154.2.87.1 openSUSE-SU-2023:0117-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed chromium 113.0.5672.126-1.1 openSUSE-SU-2024:12962-1, openSUSE-SU-2024:12938-1
openSUSE Tumbleweed nodejs-electron 22.3.13-1.1 openSUSE-SU-2024:13009-1
openSUSE Leap 15.5 opera 99.0.4788.13-lp155.3.6.1 openSUSE-SU-2023:0115-1
openSUSE Leap 15.4 chromium 113.0.5672.126-bp154.2.87.1 openSUSE-SU-2023:0117-1
openSUSE Leap 15.4 opera 99.0.4788.13-lp154.2.47.1 openSUSE-SU-2023:0114-1

Advisories 8

References