Every CVE Search/ Get API key

CVE-2023-0927

Use after free in Web Payments API in Google Chrome on Android prior to 110.0.5481.177 allowed a...

8.8 HighFix available

Use after free in Web Payments API in Google Chrome on Android prior to 110.0.5481.177 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.58%Down 0.5 points since Feb 23, 2023
90%50%10%1%

What each source reports

NVD Score used 8.8

Use after free in Web Payments API in Google Chrome on Android prior to 110.0.5481.177 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Record
CVE-2023-0927
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-416
Updated
2026-11-02
CVE List 8.8

Use after free in Web Payments API in Google Chrome on Android prior to 110.0.5481.177 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Record
CVE-2023-0927
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-416
Updated
2026-11-02
EUVDEUVD-2023-12914 8.8

Use after free in Web Payments API in Google Chrome on Android prior to 110.0.5481.177 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Record
EUVD-2023-12914
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-03
GitHub AdvisoriesGHSA-4746-8222-r3vf 8.8

Use after free in Web Payments API in Google Chrome on Android prior to 110.0.5481.177 allowed a...

Use after free in Web Payments API in Google Chrome on Android prior to 110.0.5481.177 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Record
GHSA-4746-8222-r3vf
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-416
Updated
2026-11-02
OSV 8.8

Use after free in Web Payments API in Google Chrome on Android prior to 110.0.5481.177 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Record
CVE-2023-0927
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2023-0927 8.8

Use after free in Web Payments API in Google Chrome on Android prior to 110.0.5481.177 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Record
DEBIAN-CVE-2023-0927
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 6 moreShow less
OSVMGASA-2023-0076 No score

Updated chromium-browser-stable packages fix security vulnerability

Chromium updated Chromium to 110.0.5481.177 to fix vulnerabilities including [CVE-2023-0927] Use after free in Web Payments API. [CVE-2023-0928] Use after free in SwiftShader. [CVE-2023-0929] Use after free in Vulkan. [CVE-2023-0930] Heap buffer overflow in Video. [CVE-2023-0931] Use after free in Video. [CVE-2023-0932] Use after free in WebRTC. [CVE-2023-0933] Integer overflow in PDF. [CVE-2023-0941] Use after free in Prompts.

Record
MGASA-2023-0076
Updated
2026-11-02
OSVopenSUSE-SU-2023:0061-1 No score

Security update for chromium

This update for chromium fixes the following issues:

Chromium 110.0.5481.177 (boo#1208589)

  • CVE-2023-0927: Use after free in Web Payments API
  • CVE-2023-0928: Use after free in SwiftShader
  • CVE-2023-0929: Use after free in Vulkan
  • CVE-2023-0930: Heap buffer overflow in Video
  • CVE-2023-0931: Use after free in Video
  • CVE-2023-0932: Use after free in WebRTC
  • CVE-2023-0933: Integer overflow in PDF
  • CVE-2023-0941: Use after free in Prompts
  • Various fixes from internal audits, fuzzing and other initiatives

Chromium 110.0.5481.100

  • fix regression on SAP Business Objects web UI
  • fix date formatting behavior change from ICU 72
Record
openSUSE-SU-2023:0061-1
Updated
2026-11-02
OSVopenSUSE-SU-2023:0066-1 No score

Security update for opera

This update for opera fixes the following issues:

Update to 96.0.4693.31

  • CHR-9206 Update Chromium on desktop-stable-110-4693 to 110.0.5481.178
  • DNA-104492 [Stable A/B Test] React Start Page for Austria 50%
  • DNA-104660 Browser crash when calling window.opr.authPrivate API in a private mode
  • DNA-105000 Crash at non-virtual thunk to SadTabView::OnBoundsChanged(gfx::Rect const&)
  • DNA-105138 Hang-up button is red in video popout
  • DNA-105211 Johnny5 – Prepare extension to be usable in Desktop
  • DNA-105377 Add API for extension to be able to open sidebar panel
  • DNA-105378 Add 'AI Shorten' functionality to search/copy tooltip
  • DNA-105410 Change Popup functionality depending on number of words selected
  • DNA-105429 Fix privileges for Shodan api
  • DNA-105434 Change popup depending on number of words
  • DNA-105442 Fix Update & Recovery page styling
  • DNA-105455 [Search box] Search box does not resize dynamically
  • DNA-105606 Enabling news by default on SP test- 2

The update to chromium 110.0.5481.178 fixes following issues:
CVE-2023-0927, CVE-2023-0928, CVE-2023-0929, CVE-2023-0930, CVE-2023-0931, CVE-2023-0932, CVE-2023-0933, CVE-2023-0941

Record
openSUSE-SU-2023:0066-1
Updated
2026-11-02
OSVopenSUSE-SU-2023:0115-1 No score

Security update for opera

This update for opera fixes the following issues:

  • Update to 99.0.4788.13

    • CHR-9290 Update Chromium on desktop-stable-113-4788 to 113.0.5672.127
    • DNA-107317 __delayLoadHelper2 crash in crashreporter

  • The update to chromium 113.0.5672.127 fixes following issues: CVE-2023-2721, CVE-2023-2722, CVE-2023-2723, CVE-2023-2724, CVE-2023-2725, CVE-2023-2726

  • Update to 99.0.4788.9

    • CHR-9283 Update Chromium on desktop-stable-113-4788 to 113.0.5672.93
    • DNA-107638 Translations for O99
    • DNA-107678 Crash Report [@ BrowserContextKeyedServiceFactory:: BrowserContextKeyedServiceFactory(char const*, BrowserContextDependencyManager*) ]
    • DNA-107795 Fix wrong german translation of 'Close All Duplicate Tabs'
    • DNA-107800 Fonts on section#folder and AddSitePanel not readable when animated wallpaper chosen
    • DNA-107840 Promote O99 to stable

  • Update to 98.0.4759.39

    • DNA-102363 ChromeFileSystemAccessPermissionContextTest. ConfirmSensitiveEntryAccess_DangerousFile fails
    • DNA-105534 [Add to Opera] Incorrect scroll on modal when browser window size is too small
    • DNA-106649 Opening new tab when pinned tab is active gives 2 active tabs
    • DNA-107226 Speed Dial freezes and empty space remains after Continue booking tile dragging
    • DNA-107435 Building archive_source_release target fails
    • DNA-107441 [Start page] Right mouse click on tile in continue on section opens target site in current tab
    • DNA-107508 Crash at permissions::PermissionRecoverySuccessRate Tracker::TrackUsage(ContentSettingsType)
    • DNA-107528 Handle real-time SD impression reporting
    • DNA-107546 Context menus broken with one workspace
    • DNA-107548 Paste from Context Menu doesn’t work for Search on StartPage
    • DNA-107560 Optimize real-time SD impression reporting
Record
openSUSE-SU-2023:0115-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:12724-1 No score

chromedriver-110.0.5481.177-1.1 on GA media

These are all security issues fixed in the chromedriver-110.0.5481.177-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:12724-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:12948-1 No score

ungoogled-chromium-113.0.5672.92-1.1 on GA media

These are all security issues fixed in the ungoogled-chromium-113.0.5672.92-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:12948-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
chromium
Debian:12
 before 110.0.5481.177-1
110.0.5481.177-1
chromium
Debian:13
 before 110.0.5481.177-1
110.0.5481.177-1
chromium
Debian:14
 before 110.0.5481.177-1
110.0.5481.177-1
chromium
Debian:11
From an advisory covering 8 CVEs
 before 110.0.5481.177-1~deb11u1, plus listed versions
100.0.4896.127-1100.0.4896.127-1~deb11u1100.0.4896.60-1100.0.4896.60-1~deb11u1100.0.4896.75-1
Show 45 moreShow less
100.0.4896.75-1~deb11u1100.0.4896.88-1100.0.4896.88-1~deb11u1101.0.4951.41-1101.0.4951.41-1~deb11u1101.0.4951.41-2101.0.4951.54-1101.0.4951.64-1101.0.4951.64-1~deb11u1102.0.5005.115-1102.0.5005.115-1~deb11u1102.0.5005.61-1102.0.5005.61-1~deb11u1103.0.5060.114-1103.0.5060.114-1~deb11u1103.0.5060.134-1103.0.5060.134-1~deb11u1103.0.5060.53-1103.0.5060.53-1~deb11u1104.0.5112.101-1104.0.5112.101-1~deb11u1104.0.5112.79-1104.0.5112.79-1~deb11u1105.0.5195.102-1105.0.5195.102-1~deb11u1105.0.5195.125-1105.0.5195.125-1~deb11u1105.0.5195.52-1105.0.5195.52-1~deb11u1106.0.5249.103-1106.0.5249.103-2106.0.5249.119-1106.0.5249.119-1~deb11u1106.0.5249.61-1106.0.5249.61-1~deb11u1106.0.5249.91-1106.0.5249.91-1~deb11u1107.0.5304.110-1107.0.5304.110-1~deb11u1107.0.5304.110-2107.0.5304.121-1107.0.5304.121-1~deb11u1107.0.5304.68-1107.0.5304.68-1~deb11u1107.0.5304.87-1
110.0.5481.177-1~deb11u1
chromium-browser-stable
Mageia:8
From an advisory covering 8 CVEs
 before 110.0.5481.177-1.mga8
110.0.5481.177-1.mga8
chromium
SUSE:Package Hub 15 SP4
From an advisory covering 8 CVEs
 before 110.0.5481.177-bp154.2.70.1
110.0.5481.177-bp154.2.70.1
chromium
openSUSE:Leap 15.4
From an advisory covering 8 CVEs
 before 110.0.5481.177-bp154.2.70.1
110.0.5481.177-bp154.2.70.1
opera
openSUSE:Leap 15.4 NonFree
From an advisory covering 8 CVEs
 before 96.0.4693.31-lp154.2.44.1
96.0.4693.31-lp154.2.44.1
opera
openSUSE:Leap 15.5 NonFree
From an advisory covering 89 CVEs
 before 99.0.4788.13-lp155.3.6.1
99.0.4788.13-lp155.3.6.1
chromium
openSUSE:Tumbleweed
From an advisory covering 8 CVEs
 before 110.0.5481.177-1.1
110.0.5481.177-1.1
chromium
openSUSE:Tumbleweed
From an advisory covering 2310 CVEs
 before 113.0.5672.92-1.1
113.0.5672.92-1.1

History

History
RecordedChangedSources
affected, facts
aliases, publishedEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-0927 is a high vulnerability (CVSS 8.8) in Google Chrome, published February 22, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.58%, the 47th percentile. Fixed in chromium 110.0.5481.177-1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 35 versions and 2,128 references. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open