Every CVE Search/ Get API key

CVE-2023-4366

Use after free in Extensions in Google Chrome prior to 116.0.5845.96 allowed an attacker who...

8.8 HighFix available

Use after free in Extensions in Google Chrome prior to 116.0.5845.96 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.67%Up 0.6 points since Aug 16, 2023
90%50%10%1%

What each source reports

NVD Score used 8.8

Use after free in Extensions in Google Chrome prior to 116.0.5845.96 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

Record
CVE-2023-4366
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-416
Updated
2026-11-02
CVE List No score

Use after free in Extensions in Google Chrome prior to 116.0.5845.96 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

Record
CVE-2023-4366
Updated
2026-11-02
EUVDEUVD-2023-54230 No score

Use after free in Extensions in Google Chrome prior to 116.0.5845.96 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

Record
EUVD-2023-54230
Updated
2026-11-03
GitHub AdvisoriesGHSA-3p85-44fv-28jc 8.8

Use after free in Extensions in Google Chrome prior to 116.0.5845.96 allowed an attacker who...

Use after free in Extensions in Google Chrome prior to 116.0.5845.96 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

Record
GHSA-3p85-44fv-28jc
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-416
Updated
2026-11-02
OSV 8.8

Use after free in Extensions in Google Chrome prior to 116.0.5845.96 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

Record
CVE-2023-4366
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2023-4366 8.8

Use after free in Extensions in Google Chrome prior to 116.0.5845.96 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

Record
DEBIAN-CVE-2023-4366
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 4 moreShow less
OSVopenSUSE-SU-2023:0234-1 No score

Security update for chromium

This update for chromium fixes the following issues:

Chromium 116.0.5845.96

  • New CSS features: Motion Path, and 'display' and 'content-visibility' animations
  • Web APIs: AbortSignal.any(), BYOB support for Fetch, Back/ forward cache NotRestoredReason API, Document Picture-in- Picture, Expanded Wildcards in Permissions Policy Origins, FedCM bundle: Login Hint API, User Info API, and RP Context API, Non-composed Mouse and Pointer enter/leave events, Remove document.open sandbox inheritance, Report Critical-CH caused restart in NavigationTiming

This update fixes a number of security issues (boo#1214301):

  • CVE-2023-2312: Use after free in Offline
  • CVE-2023-4349: Use after free in Device Trust Connectors
  • CVE-2023-4350: Inappropriate implementation in Fullscreen
  • CVE-2023-4351: Use after free in Network
  • CVE-2023-4352: Type Confusion in V8
  • CVE-2023-4353: Heap buffer overflow in ANGLE
  • CVE-2023-4354: Heap buffer overflow in Skia
  • CVE-2023-4355: Out of bounds memory access in V8
  • CVE-2023-4356: Use after free in Audio
  • CVE-2023-4357: Insufficient validation of untrusted input in XML
  • CVE-2023-4358: Use after free in DNS
  • CVE-2023-4359: Inappropriate implementation in App Launcher
  • CVE-2023-4360: Inappropriate implementation in Color
  • CVE-2023-4361: Inappropriate implementation in Autofill
  • CVE-2023-4362: Heap buffer overflow in Mojom IDL
  • CVE-2023-4363: Inappropriate implementation in WebShare
  • CVE-2023-4364: Inappropriate implementation in Permission Prompts
  • CVE-2023-4365: Inappropriate implementation in Fullscreen
  • CVE-2023-4366: Use after free in Extensions
  • CVE-2023-4367: Insufficient policy enforcement in Extensions API
  • CVE-2023-4368: Insufficient policy enforcement in Extensions API
  • Fix crash with extensions (boo#1214003)
Record
openSUSE-SU-2023:0234-1
Updated
2026-11-02
OSVopenSUSE-SU-2023:0251-1 No score

Security update for opera

This update for opera fixes the following issues:

  • Update to 102.0.4880.40

    • DNA-111203 Prepare translations for home button in settings

  • Changes in 102.0.4880.38

    • DNA-110720 [Sidebar] Sidebar app increase size every time it's reopened
    • DNA-110723 Music logo in light mode of 'Select service' unreadable on hover
    • DNA-110821 Run-if-alive callback missing in WMFDecoderImpl
    • DNA-110835 Search/copy popup issues
    • DNA-111038 Disable profile migration
    • DNA-111263 Tab island animation incorrect when tabstrip full

  • Update to 102.0.4880.33

    • CHR-9411 Update Chromium on desktop-stable-116-4880 to 116.0.5845.141
    • DNA-110172 [BUG] Images inside popup does not get rounded corner
    • DNA-110828 Update chess.com build
    • DNA-110834 Crash at opera::component_based:: TabAnimationController::StartAnimatedLayout(opera:: component_based::TabAnimationController::AnimationInfo, base::OnceCallback)
    • DNA-111144 Enable a new version of the extension.

  • The update to chromium 116.0.5845.141 fixes following issues: CVE-2023-4572

  • Update to 102.0.4880.29

    • DNA-109498 Splash screen is shown on every restart of the browser
    • DNA-109698 Test Amazon Music support
    • DNA-109840 Amazon music logo is very small and unreadable
    • DNA-109841 Amazon music logo in player mode is too wide
    • DNA-109842 [opauto] Add tests for Amazon Music in Player
    • DNA-109937 Crash at opera::ComponentTabStripController:: SetGroupCollapsed(tab_groups::TabGroupId const&, bool)
    • DNA-110107 Clicking roblox link on page closes the tab
    • DNA-110110 [Tab strip][Tab island] Middle/right mouse click on top of the screen have no/wrong efect
    • DNA-110125 [Win/Lin] New design for default scrollbars on web page
    • DNA-110130 Capture mouse events on the 1-pixel edge to the right of the web view
    • DNA-110586 Shadow is clipped if first tab is selected
    • DNA-110637 Revert removal of start page button
    • DNA-110684 Add bookmarks permissions
    • DNA-110702 [Scrollable] Pin group is not aligned with address bar
    • DNA-110737 [OMenu] Menu button looks weird
    • DNA-110788 No 1-pixel edge in full screen mode
    • DNA-110828 Update chess.com build
    • DNA-110842 [Tab strip] Make ‘+’ button round(er) again
    • DNA-110874 Bring back Home button
    • DNA-110876 Search box on Start page without transparency
    • DNA-110878 Turn on Amazon Music on developer
    • DNA-110905 Amazon Music for all given locales
    • DNA-110961 [WinLin] Remove 1-pixel edge in full screen mode
    • DNA-111038 Disable profile migration
    • DNA-111079 Improve user-profile migration
    • DNA-111092 Disable profile migration flag for desktop-stable-116-4880

  • Update to 102.0.4880.16

    • CHR-9396 Update Chromium on desktop-stable-116-4880 to 116.0.5845.97
    • DNA-110040 Crash at crash_reporter::(anonymous namespace):: AbslAbortHook(char const*, int, char const*, char const*, char const*)
    • DNA-110315 O-menu opening after pressing alt on site which have action for Alt press
    • DNA-110440 [Tab strip] Tab favicon not cropped when it does not fit in tab size
    • DNA-110469 Move Shopping corner and Loomi to 'Special Features' section
    • DNA-110510 [Tab strip] Mute icon displayed over tab title
    • DNA-110526 If group is first the tab bar is not aligned with address bar
    • DNA-110828 Update chess.com build
    • DNA-110836 Promote 102 to stable
    • DNA-110892 Translations for O102
    • DNA-110962 Fix ab_tests.json preferences override not working

  • The update to chromium 116.0.5845.97 fixes following issues: CVE-2023-2312, CVE-2023-4349, CVE-2023-4350, CVE-2023-4351, CVE-2023-4352, CVE-2023-4353, CVE-2023-4354, CVE-2023-4355, CVE-2023-4356, CVE-2023-4357, CVE-2023-4358, CVE-2023-4359, CVE-2023-4360, CVE-2023-4361, CVE-2023-4362, CVE-2023-4362, CVE-2023-4363, CVE-2023-4364, CVE-2023-4365, CVE-2023-4366, CVE-2023-4367, CVE-2023-4368

  • Complete Opera 102 changelog at: …

Record
openSUSE-SU-2023:0251-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:13139-1 No score

chromedriver-116.0.5845.96-1.1 on GA media

These are all security issues fixed in the chromedriver-116.0.5845.96-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:13139-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:13144-1 No score

ungoogled-chromium-116.0.5845.96-1.1 on GA media

These are all security issues fixed in the ungoogled-chromium-116.0.5845.96-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:13144-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
chromium
Debian:12
 before 116.0.5845.96-1~deb12u1, plus listed versions
113.0.5672.126-1114.0.5735.106-1114.0.5735.106-1~deb11u1114.0.5735.106-1~deb12u1114.0.5735.133-1
Show 19 moreShow less
114.0.5735.133-1~deb11u1114.0.5735.133-1~deb12u1114.0.5735.198-1114.0.5735.198-1~deb11u1114.0.5735.198-1~deb12u1114.0.5735.90-1114.0.5735.90-2114.0.5735.90-2~deb11u1114.0.5735.90-2~deb12u1115.0.5790.102-1115.0.5790.102-2115.0.5790.170-1115.0.5790.170-1~deb11u1115.0.5790.170-1~deb12u1115.0.5790.98-1115.0.5790.98-1~deb11u1115.0.5790.98-1~deb12u1115.0.5790.98-2116.0.5845.96-1~deb11u1
116.0.5845.96-1~deb12u1
chromium
Debian:13
 before 116.0.5845.96-1
116.0.5845.96-1
chromium
Debian:14
 before 116.0.5845.96-1
116.0.5845.96-1
chromium
Debian:12
From an advisory covering 21 CVEs
 before 116.0.5845.96-1~deb12u1, plus listed versions
113.0.5672.126-1114.0.5735.106-1114.0.5735.106-1~deb11u1114.0.5735.106-1~deb12u1114.0.5735.133-1
Show 19 moreShow less
114.0.5735.133-1~deb11u1114.0.5735.133-1~deb12u1114.0.5735.198-1114.0.5735.198-1~deb11u1114.0.5735.198-1~deb12u1114.0.5735.90-1114.0.5735.90-2114.0.5735.90-2~deb11u1114.0.5735.90-2~deb12u1115.0.5790.102-1115.0.5790.102-2115.0.5790.170-1115.0.5790.170-1~deb11u1115.0.5790.170-1~deb12u1115.0.5790.98-1115.0.5790.98-1~deb11u1115.0.5790.98-1~deb12u1115.0.5790.98-2116.0.5845.96-1~deb11u1
116.0.5845.96-1~deb12u1
chromium
Debian:11
From an advisory covering 21 CVEs
 before 116.0.5845.96-1~deb11u1, plus listed versions
100.0.4896.127-1100.0.4896.127-1~deb11u1100.0.4896.60-1100.0.4896.60-1~deb11u1100.0.4896.75-1
Show 45 moreShow less
100.0.4896.75-1~deb11u1100.0.4896.88-1100.0.4896.88-1~deb11u1101.0.4951.41-1101.0.4951.41-1~deb11u1101.0.4951.41-2101.0.4951.54-1101.0.4951.64-1101.0.4951.64-1~deb11u1102.0.5005.115-1102.0.5005.115-1~deb11u1102.0.5005.61-1102.0.5005.61-1~deb11u1103.0.5060.114-1103.0.5060.114-1~deb11u1103.0.5060.134-1103.0.5060.134-1~deb11u1103.0.5060.53-1103.0.5060.53-1~deb11u1104.0.5112.101-1104.0.5112.101-1~deb11u1104.0.5112.79-1104.0.5112.79-1~deb11u1105.0.5195.102-1105.0.5195.102-1~deb11u1105.0.5195.125-1105.0.5195.125-1~deb11u1105.0.5195.52-1105.0.5195.52-1~deb11u1106.0.5249.103-1106.0.5249.103-2106.0.5249.119-1106.0.5249.119-1~deb11u1106.0.5249.61-1106.0.5249.61-1~deb11u1106.0.5249.91-1106.0.5249.91-1~deb11u1107.0.5304.110-1107.0.5304.110-1~deb11u1107.0.5304.110-2107.0.5304.121-1107.0.5304.121-1~deb11u1107.0.5304.68-1107.0.5304.68-1~deb11u1107.0.5304.87-1
116.0.5845.96-1~deb11u1
chromium
SUSE:Package Hub 15 SP4
From an advisory covering 21 CVEs
 before 116.0.5845.96-bp155.2.19.1
116.0.5845.96-bp155.2.19.1
chromium
SUSE:Package Hub 15 SP5
From an advisory covering 21 CVEs
 before 116.0.5845.96-bp155.2.19.1
116.0.5845.96-bp155.2.19.1
chromium
openSUSE:Leap 15.4
From an advisory covering 21 CVEs
 before 116.0.5845.96-bp155.2.19.1
116.0.5845.96-bp155.2.19.1
chromium
openSUSE:Leap 15.5
From an advisory covering 21 CVEs
 before 116.0.5845.96-bp155.2.19.1
116.0.5845.96-bp155.2.19.1
opera
openSUSE:Leap 15.4 NonFree
From an advisory covering 36 CVEs
 before 102.0.4880.40-lp154.2.50.1
102.0.4880.40-lp154.2.50.1
chromium
openSUSE:Tumbleweed
From an advisory covering 21 CVEs
 before 116.0.5845.96-1.1
116.0.5845.96-1.1

History

History
RecordedChangedSources
affected, facts
aliases, publishedEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-4366 is a high vulnerability (CVSS 8.8) in Google Chrome, published August 15, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.67%, the 52nd percentile. Fixed in chromium 116.0.5845.96-1~deb12u1.

References

Show 43 moreShow less
This page doesn't list everything

Left out here: 76 versions and the rest of 1 source description. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open