CVE-2023-4068

Type Confusion in V8 in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to...

8.1 HighFix available

Type Confusion in V8 in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High)

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: Required

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: None

Exploit likelihood

16.1%Up 16.1 points since Aug 3, 2023

What each source reports

NVD Score used 8.1

Type Confusion in V8 in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High)

Record: CVE-2023-4068
CVSS 3.1: 8.1 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Weakness: CWE-843
Updated: 2026-11-02

CVE List No score

Type Confusion in V8 in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High)

Record: CVE-2023-4068
Updated: 2026-11-02

EUVDEUVD-2023-53958 No score

Type Confusion in V8 in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High)

Record: EUVD-2023-53958
Updated: 2026-11-03

GitHub AdvisoriesGHSA-wh89-h5f7-hhcr 8.1

Type Confusion in V8 in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to...

Type Confusion in V8 in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High)

Record: GHSA-wh89-h5f7-hhcr
CVSS 3.1: 8.1 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Weakness: CWE-843
Updated: 2026-11-02

OSV 8.1

Type Confusion in V8 in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High)

Record: CVE-2023-4068
CVSS 3.1: 8.1 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVDEBIAN-CVE-2023-4068 8.1

Type Confusion in V8 in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High)

Record: DEBIAN-CVE-2023-4068
CVSS 3.1: 8.1 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Updated: 2026-11-02

Show 4 moreShow less

OSVopenSUSE-SU-2023:0216-1 No score

Security update for chromium

This update for chromium fixes the following issues:

Chromium 115.0.5790.170 (boo#1213920)

CVE-2023-4068: Type Confusion in V8
CVE-2023-4069: Type Confusion in V8
CVE-2023-4070: Type Confusion in V8
CVE-2023-4071: Heap buffer overflow in Visuals
CVE-2023-4072: Out of bounds read and write in WebGL
CVE-2023-4073: Out of bounds memory access in ANGLE
CVE-2023-4074: Use after free in Blink Task Scheduling
CVE-2023-4075: Use after free in Cast
CVE-2023-4076: Use after free in WebRTC
CVE-2023-4077: Insufficient data validation in Extensions
CVE-2023-4078: Inappropriate implementation in Extensions

Specify re2 build dependency in a way that makes Leap packages build in devel project and in Maintenance

Record: openSUSE-SU-2023:0216-1
Updated: 2026-11-02

OSVopenSUSE-SU-2023:0251-1 No score

Security update for opera

This update for opera fixes the following issues:

Update to 102.0.4880.40
- DNA-111203 Prepare translations for home button in settings
Changes in 102.0.4880.38
- DNA-110720 [Sidebar] Sidebar app increase size every time it's reopened
- DNA-110723 Music logo in light mode of 'Select service' unreadable on hover
- DNA-110821 Run-if-alive callback missing in WMFDecoderImpl
- DNA-110835 Search/copy popup issues
- DNA-111038 Disable profile migration
- DNA-111263 Tab island animation incorrect when tabstrip full
Update to 102.0.4880.33
- CHR-9411 Update Chromium on desktop-stable-116-4880 to 116.0.5845.141
- DNA-110172 [BUG] Images inside popup does not get rounded corner
- DNA-110828 Update chess.com build
- DNA-110834 Crash at opera::component_based:: TabAnimationController::StartAnimatedLayout(opera:: component_based::TabAnimationController::AnimationInfo, base::OnceCallback)
- DNA-111144 Enable a new version of the extension.
The update to chromium 116.0.5845.141 fixes following issues: CVE-2023-4572
Update to 102.0.4880.29
- DNA-109498 Splash screen is shown on every restart of the browser
- DNA-109698 Test Amazon Music support
- DNA-109840 Amazon music logo is very small and unreadable
- DNA-109841 Amazon music logo in player mode is too wide
- DNA-109842 [opauto] Add tests for Amazon Music in Player
- DNA-109937 Crash at opera::ComponentTabStripController:: SetGroupCollapsed(tab_groups::TabGroupId const&, bool)
- DNA-110107 Clicking roblox link on page closes the tab
- DNA-110110 [Tab strip][Tab island] Middle/right mouse click on top of the screen have no/wrong efect
- DNA-110125 [Win/Lin] New design for default scrollbars on web page
- DNA-110130 Capture mouse events on the 1-pixel edge to the right of the web view
- DNA-110586 Shadow is clipped if first tab is selected
- DNA-110637 Revert removal of start page button
- DNA-110684 Add bookmarks permissions
- DNA-110702 [Scrollable] Pin group is not aligned with address bar
- DNA-110737 [OMenu] Menu button looks weird
- DNA-110788 No 1-pixel edge in full screen mode
- DNA-110828 Update chess.com build
- DNA-110842 [Tab strip] Make ‘+’ button round(er) again
- DNA-110874 Bring back Home button
- DNA-110876 Search box on Start page without transparency
- DNA-110878 Turn on Amazon Music on developer
- DNA-110905 Amazon Music for all given locales
- DNA-110961 [WinLin] Remove 1-pixel edge in full screen mode
- DNA-111038 Disable profile migration
- DNA-111079 Improve user-profile migration
- DNA-111092 Disable profile migration flag for desktop-stable-116-4880
Update to 102.0.4880.16
- CHR-9396 Update Chromium on desktop-stable-116-4880 to 116.0.5845.97
- DNA-110040 Crash at crash_reporter::(anonymous namespace):: AbslAbortHook(char const*, int, char const*, char const*, char const*)
- DNA-110315 O-menu opening after pressing alt on site which have action for Alt press
- DNA-110440 [Tab strip] Tab favicon not cropped when it does not fit in tab size
- DNA-110469 Move Shopping corner and Loomi to 'Special Features' section
- DNA-110510 [Tab strip] Mute icon displayed over tab title
- DNA-110526 If group is first the tab bar is not aligned with address bar
- DNA-110828 Update chess.com build
- DNA-110836 Promote 102 to stable
- DNA-110892 Translations for O102
- DNA-110962 Fix ab_tests.json preferences override not working
The update to chromium 116.0.5845.97 fixes following issues: CVE-2023-2312, CVE-2023-4349, CVE-2023-4350, CVE-2023-4351, CVE-2023-4352, CVE-2023-4353, CVE-2023-4354, CVE-2023-4355, CVE-2023-4356, CVE-2023-4357, CVE-2023-4358, CVE-2023-4359, CVE-2023-4360, CVE-2023-4361, CVE-2023-4362, CVE-2023-4362, CVE-2023-4363, CVE-2023-4364, CVE-2023-4365, CVE-2023-4366, CVE-2023-4367, CVE-2023-4368
Complete Opera 102 changelog at: …

Record: openSUSE-SU-2023:0251-1
Updated: 2026-11-02

OSVopenSUSE-SU-2024:13092-1 No score

chromedriver-115.0.5790.170-1.1 on GA media

These are all security issues fixed in the chromedriver-115.0.5790.170-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:13092-1
Updated: 2026-11-02

OSVopenSUSE-SU-2024:13102-1 No score

ungoogled-chromium-115.0.5790.170-1.1 on GA media

These are all security issues fixed in the ungoogled-chromium-115.0.5790.170-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:13102-1
Updated: 2026-11-02

Affected products

google chrome

Affected packages

Affected packages
Package	Affected	Fixed
`chromium` Debian:12	before 115.0.5790.170-1~deb12u1, plus listed versions 113.0.5672.126-1114.0.5735.106-1114.0.5735.106-1~deb11u1114.0.5735.106-1~deb12u1114.0.5735.133-1 Show 16 moreShow less 114.0.5735.133-1~deb11u1114.0.5735.133-1~deb12u1114.0.5735.198-1114.0.5735.198-1~deb11u1114.0.5735.198-1~deb12u1114.0.5735.90-1114.0.5735.90-2114.0.5735.90-2~deb11u1114.0.5735.90-2~deb12u1115.0.5790.102-1115.0.5790.102-2115.0.5790.170-1~deb11u1115.0.5790.98-1115.0.5790.98-1~deb11u1115.0.5790.98-1~deb12u1115.0.5790.98-2	115.0.5790.170-1~deb12u1
`chromium` Debian:13	before 115.0.5790.170-1	115.0.5790.170-1
`chromium` Debian:14	before 115.0.5790.170-1	115.0.5790.170-1
`chromium` Debian:11 From an advisory covering 11 CVEs	before 115.0.5790.170-1~deb11u1, plus listed versions 100.0.4896.127-1100.0.4896.127-1~deb11u1100.0.4896.60-1100.0.4896.60-1~deb11u1100.0.4896.75-1 Show 45 moreShow less 100.0.4896.75-1~deb11u1100.0.4896.88-1100.0.4896.88-1~deb11u1101.0.4951.41-1101.0.4951.41-1~deb11u1101.0.4951.41-2101.0.4951.54-1101.0.4951.64-1101.0.4951.64-1~deb11u1102.0.5005.115-1102.0.5005.115-1~deb11u1102.0.5005.61-1102.0.5005.61-1~deb11u1103.0.5060.114-1103.0.5060.114-1~deb11u1103.0.5060.134-1103.0.5060.134-1~deb11u1103.0.5060.53-1103.0.5060.53-1~deb11u1104.0.5112.101-1104.0.5112.101-1~deb11u1104.0.5112.79-1104.0.5112.79-1~deb11u1105.0.5195.102-1105.0.5195.102-1~deb11u1105.0.5195.125-1105.0.5195.125-1~deb11u1105.0.5195.52-1105.0.5195.52-1~deb11u1106.0.5249.103-1106.0.5249.103-2106.0.5249.119-1106.0.5249.119-1~deb11u1106.0.5249.61-1106.0.5249.61-1~deb11u1106.0.5249.91-1106.0.5249.91-1~deb11u1107.0.5304.110-1107.0.5304.110-1~deb11u1107.0.5304.110-2107.0.5304.121-1107.0.5304.121-1~deb11u1107.0.5304.68-1107.0.5304.68-1~deb11u1107.0.5304.87-1	115.0.5790.170-1~deb11u1
`chromium` Debian:12 From an advisory covering 11 CVEs	before 115.0.5790.170-1~deb12u1, plus listed versions 113.0.5672.126-1114.0.5735.106-1114.0.5735.106-1~deb11u1114.0.5735.106-1~deb12u1114.0.5735.133-1 Show 16 moreShow less 114.0.5735.133-1~deb11u1114.0.5735.133-1~deb12u1114.0.5735.198-1114.0.5735.198-1~deb11u1114.0.5735.198-1~deb12u1114.0.5735.90-1114.0.5735.90-2114.0.5735.90-2~deb11u1114.0.5735.90-2~deb12u1115.0.5790.102-1115.0.5790.102-2115.0.5790.170-1~deb11u1115.0.5790.98-1115.0.5790.98-1~deb11u1115.0.5790.98-1~deb12u1115.0.5790.98-2	115.0.5790.170-1~deb12u1
`chromium` SUSE:Package Hub 15 SP4 From an advisory covering 11 CVEs	before 115.0.5790.170-bp155.2.16.1	115.0.5790.170-bp155.2.16.1
`chromium` SUSE:Package Hub 15 SP5 From an advisory covering 11 CVEs	before 115.0.5790.170-bp155.2.16.1	115.0.5790.170-bp155.2.16.1
`chromium` openSUSE:Leap 15.4 From an advisory covering 11 CVEs	before 115.0.5790.170-bp155.2.16.1	115.0.5790.170-bp155.2.16.1
`chromium` openSUSE:Leap 15.5 From an advisory covering 11 CVEs	before 115.0.5790.170-bp155.2.16.1	115.0.5790.170-bp155.2.16.1
`opera` openSUSE:Leap 15.4 NonFree From an advisory covering 36 CVEs	before 102.0.4880.40-lp154.2.50.1	102.0.4880.40-lp154.2.50.1
`chromium` openSUSE:Tumbleweed From an advisory covering 11 CVEs	before 115.0.5790.170-1.1	115.0.5790.170-1.1

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	aliases, published	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-4068 is a high vulnerability (CVSS 8.1) in Google Chrome, published August 3, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 16.1%, the 96th percentile. Fixed in chromium 115.0.5790.170-1~deb12u1.

References

Show 43 moreShow less

This page doesn't list everything

Left out here: 73 versions and the rest of 1 source description. The JSON record has them.