CVE-2023-3079

Chromium: CVE-2023-3079 Type Confusion in V8

CVE-2023-3079 is fixed in 3 products on 2 platforms, first by DEBIAN-CVE-2023-3079, released June 5, 2023. It is being exploited: CISA added it to the Known Exploited Vulnerabilities catalog on June 7, 2023. Patch Radar priority: Patch now.

Patch nowCISA KEVFixed on 2 platforms
CVSS
8.8
high
Exploitation
Exploited
Reported by the vendor
CISA KEV
Jun 7, 2023
Federal due date Jun 28, 2023
EPSS
0.3786
98th percentile

<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.</p> <p>Google is aware that an exploit for CVE-2023-3079 exists in the wild.</p>

Where it's fixed

ProductFixed inFixReleased
Windows apps
Microsoft Edge Beta 127.0.2651.8 Microsoft Edge Beta 127.0.2651.8 Jun 21, 2024
Microsoft Edge Dev 127.0.2651.8 Microsoft Edge Dev 127.0.2651.8 Jun 21, 2024
Linux
chromium · Debian 11.6 (bullseye) 114.0.5735.106-1~deb11u1 DSA-5420-1 Jun 7, 2023
chromium · Debian 12.15 (bookworm) 114.0.5735.106-1~deb12u1 DSA-5420-1 Jun 7, 2023
chromium · Debian 13.5 (trixie) 114.0.5735.106-1 DEBIAN-CVE-2023-3079 Jun 5, 2023
chromium · Debian 14 114.0.5735.106-1 DEBIAN-CVE-2023-3079 Jun 5, 2023

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.