CVE-2023-5187
Use after free in Extensions in Google Chrome prior to 117.0.5938.132 allowed an attacker who...
Use after free in Extensions in Google Chrome prior to 117.0.5938.132 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
Use after free in Extensions in Google Chrome prior to 117.0.5938.132 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
- Record
CVE-2023-5187- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-416
- Updated
- 2026-11-02
CVE ListNo score
Use after free in Extensions in Google Chrome prior to 117.0.5938.132 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
- Record
CVE-2023-5187- Updated
- 2026-11-02
EUVDEUVD-2023-57524No score
Use after free in Extensions in Google Chrome prior to 117.0.5938.132 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
- Record
EUVD-2023-57524- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-hg3r-958g-g8vq
Use after free in Extensions in Google Chrome prior to 117.0.5938.132 allowed an attacker who...
Use after free in Extensions in Google Chrome prior to 117.0.5938.132 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
- Record
GHSA-hg3r-958g-g8vq- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-416
- Updated
- 2026-11-02
OSV
Use after free in Extensions in Google Chrome prior to 117.0.5938.132 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
- Record
CVE-2023-5187- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2023-5187
Use after free in Extensions in Google Chrome prior to 117.0.5938.132 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
- Record
DEBIAN-CVE-2023-5187- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 6 moreShow less
OSVMGASA-2023-0283No score
Updated chromium-browser-stable package fixes bugs and vulnerabilities
The chromium-browser-stable package has been updated to the 117.0.5938.92 release, fixing bugs and 31 vulnerabilities, together with 117.0.5938.92, 117.0.5938.88, 117.0.5938.62, 116.0.5845.187 and 116.0.5845.179.
Google is aware that an exploit for CVE-2023-5217 exists in the wild.
High CVE-2023-5217: Heap buffer overflow in vp8 encoding in libvpx. Reported by Clément Lecigne of Google's Threat Analysis Group on 2023-09-25
High CVE-2023-5186: Use after free in Passwords. Reported by [pwn2car] on 2023-09-05
High CVE-2023-5187: Use after free in Extensions. Reported by Thomas Orlita on 2023-08-25
Critical CVE-2023-4863: Heap buffer overflow in WebP. Reported by Apple Security Engineering and Architecture (SEAR) and The Citizen Lab at The University of Torontoʼs Munk School on 2023-09-06
Medium CVE-2023-4900: Inappropriate implementation in Custom Tabs. Reported by Levit Nudi from Kenya on 2023-04-06
Medium CVE-2023-4901: Inappropriate implementation in Prompts. Reported by Kang Ali on 2023-06-29
Medium CVE-2023-4902: Inappropriate implementation in Input. Reported by Axel Chong on 2023-06-14
Medium CVE-2023-4903: Inappropriate implementation in Custom Mobile Tabs. Reported by Ahmed ElMasry on 2023-05-18
Medium CVE-2023-4904: Insufficient policy enforcement in Downloads. Reported by Tudor Enache @tudorhacks on 2023-06-09
Medium CVE-2023-4905: Inappropriate implementation in Prompts. Reported by Hafiizh on 2023-04-29
Low CVE-2023-4906: Insufficient policy enforcement in Autofill. Reported by Ahmed ElMasry on 2023-05-30
Low CVE-2023-4907: Inappropriate implementation in Intents. Reported by Mohit Raj (shadow2639) on 2023-07-04
Low CVE-2023-4908: Inappropriate implementation in Picture in Picture. Reported by Axel Chong on 2023-06-06
Low CVE-2023-4909: Inappropriate implementation in Interstitials. Reported by Axel Chong on 2023-07-09
Critical CVE-2023-4863: Heap buffer overflow in WebP
High CVE-2023-4761: Out of bounds memory access in FedCM. Reported by DarkNavy on 2023-08-28
High CVE-2023-4762: Type Confusion in V8. Reported by anonymous on 2023-08-16
High CVE-2023-4763: Use after free in Networks. Reported by anonymous on 2023-08-03
High CVE-2023-4764: Incorrect security UI in BFCache. Reported by Irvan Kurniawan (sourc7) on 2023-05-20
- Record
MGASA-2023-0283- Updated
- 2026-11-02
OSVopenSUSE-SU-2023:0277-1No score
Security update for chromium
This update for chromium fixes the following issues:
Chromium 117.0.5938.132 (boo#1215776):
- CVE-2023-5217: Heap buffer overflow in vp8 encoding in libvpx (boo#1215778)
- CVE-2023-5186: Use after free in Passwords
- CVE-2023-5187: Use after free in Extensions
Chromium 117.0.5938.92:
- stability improvements
- Record
openSUSE-SU-2023:0277-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2023:0297-1No score
Security update for opera
This update for opera fixes the following issues:
Update to 103.0.4928.16
- CHR-9416 Updating Chromium on desktop-stable-* branches
- CHR-9433 Update Chromium on desktop-stable-117-4928 to 117.0.5938.89
- CHR-9449 Update Chromium on desktop-stable-117-4928 to 117.0.5938.132
- DNA-110337 Opera Intro extension custom versions
- DNA-111454 Player animations visual adjustments
- DNA-111618 Turn on #password-generator on all streams
- DNA-111645 Turn on flag #player-service-react on developer stream
- DNA-111708 Player home page is shown while music service is being loaded
- DNA-111722 [Tab strip][Tab island] Add tab in tab island button appears after size of tabs is changed
- DNA-111727 JsonPrefStore is created twice for Local State file
- DNA-111838 Promote 103.0 to stable
- DNA-111845 Turn on flag #player-service-react on all streams
- DNA-111868 Translations for O103
- DNA-111874 OMenu and Context Menus has transparent few px border
The update to chromium 117.0.5938.89 fixes following issues: CVE-2023-5217, CVE-2023-5186, CVE-2023-5187
Complete Opera 103 changelog at: https://blogs.opera.com/desktop/changelog-for-103/
Update to 102.0.4880.78
- DNA-110952 Crash at base::subtle::RefCountedBase:: ReleaseImpl() const
Update to 102.0.4880.70
- DNA-105016 Do not open file selector when closing easy files dialog with 'close this popup' option
- DNA-110437 Extensions font color in dark mode makes the text not visible
- DNA-110443 Crash at EasyFilesView::ShowFileSelector
- DNA-111231 Amazon Music logo update in sidebar Player
- DNA-111280 Make import from Crypto Browser to Opera Browser easier
- DNA-111355 [Sidebar] DevTools is not working correctly in with sidebar panel
- DNA-111708 Player home page is shown while music service is being loaded
- DNA-111162 Refresh Player home page
- DNA-111164 Implement animation in Player home page
Update to 102.0.4880.56
- DNA-110785 Crash at static void base::allocator:: UnretainedDanglingRawPtrDetectedDumpWithoutCrashing (unsigned __int64)
- DNA-110973 Crash after dragging tab from island to another screen
- DNA-111199 Disable user_education tests from component_unittests
- DNA-111369 Crash at views::View::DoRemoveChildView(views:: View*, bool, bool, views::View*)
- DNA-111538 All new open windows don`t have a close button 'x' in the right upper corner.
Changes in 102.0.4880.51
- CHR-9416 Automatic tries of updating Chromium on desktop-stable-* branches
- DNA-110101 [Linux] Maximize/restore button does not work properly
- DNA-110669 duplicated hints on system buttons
- DNA-110823 Uninstallation Survey Countries
- DNA-110881 Scroll bar doesn't change color in dark mode
- DNA-110930 Capture mouse events on the 1-pixel edge for DevTools
- DNA-110935 ChatSonic colors are unreadable in Dark Mode
- DNA-111034 Dynamic icon does not look good in edit-tile-modal
- DNA-111035 Removal custom-image should restore dynamic icon
- DNA-111177 [Start page] Letter in SD is black on light wallpaper
- DNA-111488 Improve profile migration for desktop-stable-116-4880
Update to 102.0.4880.46
- CHR-9416 Automatic tries of updating Chromium on desktop-stable-* branches
- DNA-110216 [Sidebar] Straight lines instead of rounded corners
- DNA-110539 [LIN] Crash at content::WebContentsImpl:: GetLastCommittedURL()
- DNA-110631 AB test mechanism for Speed Dial
- DNA-110656 [TabStrip] Memory leak for tab group
- DNA-111322 Only show splash screen on major version update
- DNA-111417 Crash at opera::component_based:: TabAnimationController::StartAnimatedLayout(opera:: component_based::TabAnimationController::AnimationInfo, base::OnceCallback)
- DNA-111420 Update continue on link for euro rtv agd
- DNA-111440 Crash at opera::component_based:: ComponentTabBar::GetActiveTab()
- Record
openSUSE-SU-2023:0297-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2023:0298-1No score
Security update for opera
This update for opera fixes the following issues:
Update to 103.0.4928.16
- CHR-9416 Updating Chromium on desktop-stable-* branches
- CHR-9433 Update Chromium on desktop-stable-117-4928 to 117.0.5938.89
- CHR-9449 Update Chromium on desktop-stable-117-4928 to 117.0.5938.132
- DNA-110337 Opera Intro extension custom versions
- DNA-111454 Player animations visual adjustments
- DNA-111618 Turn on #password-generator on all streams
- DNA-111645 Turn on flag #player-service-react on developer stream
- DNA-111708 Player home page is shown while music service is being loaded
- DNA-111722 [Tab strip][Tab island] Add tab in tab island button appears after size of tabs is changed
- DNA-111727 JsonPrefStore is created twice for Local State file
- DNA-111838 Promote 103.0 to stable
- DNA-111845 Turn on flag #player-service-react on all streams
- DNA-111868 Translations for O103
- DNA-111874 OMenu and Context Menus has transparent few px border
The update to chromium 117.0.5938.89 fixes following issues: CVE-2023-5217, CVE-2023-5186, CVE-2023-5187
Complete Opera 103 changelog at: https://blogs.opera.com/desktop/changelog-for-103/
Update to 102.0.4880.78
- DNA-110952 Crash at base::subtle::RefCountedBase:: ReleaseImpl() const
Update to 102.0.4880.70
- DNA-105016 Do not open file selector when closing easy files dialog with 'close this popup' option
- DNA-110437 Extensions font color in dark mode makes the text not visible
- DNA-110443 Crash at EasyFilesView::ShowFileSelector
- DNA-111231 Amazon Music logo update in sidebar Player
- DNA-111280 Make import from Crypto Browser to Opera Browser easier
- DNA-111355 [Sidebar] DevTools is not working correctly in with sidebar panel
- DNA-111708 Player home page is shown while music service is being loaded
- DNA-111162 Refresh Player home page
- DNA-111164 Implement animation in Player home page
Update to 102.0.4880.56
- DNA-110785 Crash at static void base::allocator:: UnretainedDanglingRawPtrDetectedDumpWithoutCrashing (unsigned __int64)
- DNA-110973 Crash after dragging tab from island to another screen
- DNA-111199 Disable user_education tests from component_unittests
- DNA-111369 Crash at views::View::DoRemoveChildView(views:: View*, bool, bool, views::View*)
- DNA-111538 All new open windows don`t have a close button 'x' in the right upper corner.
Changes in 102.0.4880.51
- CHR-9416 Automatic tries of updating Chromium on desktop-stable-* branches
- DNA-110101 [Linux] Maximize/restore button does not work properly
- DNA-110669 duplicated hints on system buttons
- DNA-110823 Uninstallation Survey Countries
- DNA-110881 Scroll bar doesn't change color in dark mode
- DNA-110930 Capture mouse events on the 1-pixel edge for DevTools
- DNA-110935 ChatSonic colors are unreadable in Dark Mode
- DNA-111034 Dynamic icon does not look good in edit-tile-modal
- DNA-111035 Removal custom-image should restore dynamic icon
- DNA-111177 [Start page] Letter in SD is black on light wallpaper
- DNA-111488 Improve profile migration for desktop-stable-116-4880
Update to 102.0.4880.46
- CHR-9416 Automatic tries of updating Chromium on desktop-stable-* branches
- DNA-110216 [Sidebar] Straight lines instead of rounded corners
- DNA-110539 [LIN] Crash at content::WebContentsImpl:: GetLastCommittedURL()
- DNA-110631 AB test mechanism for Speed Dial
- DNA-110656 [TabStrip] Memory leak for tab group
- DNA-111322 Only show splash screen on major version update
- DNA-111417 Crash at opera::component_based:: TabAnimationController::StartAnimatedLayout(opera:: component_based::TabAnimationController::AnimationInfo, base::OnceCallback)
- DNA-111420 Update continue on link for euro rtv agd
- DNA-111440 Crash at opera::component_based:: ComponentTabBar::GetActiveTab()
- Record
openSUSE-SU-2023:0298-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:13269-1No score
chromedriver-117.0.5938.132-1.1 on GA media
These are all security issues fixed in the chromedriver-117.0.5938.132-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:13269-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:13276-1No score
ungoogled-chromium-117.0.5938.132-1.1 on GA media
These are all security issues fixed in the ungoogled-chromium-117.0.5938.132-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:13276-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
chromiumDebian:12 | before 117.0.5938.132-1~deb12u1, plus listed versions 113.0.5672.126-1114.0.5735.106-1114.0.5735.106-1~deb11u1114.0.5735.106-1~deb12u1114.0.5735.133-1 Show 37 moreShow less114.0.5735.133-1~deb11u1114.0.5735.133-1~deb12u1114.0.5735.198-1114.0.5735.198-1~deb11u1114.0.5735.198-1~deb12u1114.0.5735.90-1114.0.5735.90-2114.0.5735.90-2~deb11u1114.0.5735.90-2~deb12u1115.0.5790.102-1115.0.5790.102-2115.0.5790.170-1115.0.5790.170-1~deb11u1115.0.5790.170-1~deb12u1115.0.5790.98-1115.0.5790.98-1~deb11u1115.0.5790.98-1~deb12u1115.0.5790.98-2116.0.5845.110-1116.0.5845.110-1~deb11u1116.0.5845.110-1~deb12u1116.0.5845.110-2116.0.5845.140-1116.0.5845.140-1~deb11u1116.0.5845.140-1~deb12u1116.0.5845.180-1116.0.5845.180-1~deb11u1116.0.5845.180-1~deb12u1116.0.5845.96-1116.0.5845.96-1~deb11u1116.0.5845.96-1~deb12u1116.0.5845.96-2117.0.5938.132-1~deb11u1117.0.5938.62-1117.0.5938.62-1~deb11u1117.0.5938.62-1~deb12u1117.0.5938.92-1 | 117.0.5938.132-1~deb12u1 |
chromiumDebian:13 | before 117.0.5938.132-1 | 117.0.5938.132-1 |
chromiumDebian:14 | before 117.0.5938.132-1 | 117.0.5938.132-1 |
chromiumDebian:11 From an advisory covering 3 CVEs | before 117.0.5938.132-1~deb11u1, plus listed versions 100.0.4896.127-1100.0.4896.127-1~deb11u1100.0.4896.60-1100.0.4896.60-1~deb11u1100.0.4896.75-1 Show 45 moreShow less100.0.4896.75-1~deb11u1100.0.4896.88-1100.0.4896.88-1~deb11u1101.0.4951.41-1101.0.4951.41-1~deb11u1101.0.4951.41-2101.0.4951.54-1101.0.4951.64-1101.0.4951.64-1~deb11u1102.0.5005.115-1102.0.5005.115-1~deb11u1102.0.5005.61-1102.0.5005.61-1~deb11u1103.0.5060.114-1103.0.5060.114-1~deb11u1103.0.5060.134-1103.0.5060.134-1~deb11u1103.0.5060.53-1103.0.5060.53-1~deb11u1104.0.5112.101-1104.0.5112.101-1~deb11u1104.0.5112.79-1104.0.5112.79-1~deb11u1105.0.5195.102-1105.0.5195.102-1~deb11u1105.0.5195.125-1105.0.5195.125-1~deb11u1105.0.5195.52-1105.0.5195.52-1~deb11u1106.0.5249.103-1106.0.5249.103-2106.0.5249.119-1106.0.5249.119-1~deb11u1106.0.5249.61-1106.0.5249.61-1~deb11u1106.0.5249.91-1106.0.5249.91-1~deb11u1107.0.5304.110-1107.0.5304.110-1~deb11u1107.0.5304.110-2107.0.5304.121-1107.0.5304.121-1~deb11u1107.0.5304.68-1107.0.5304.68-1~deb11u1107.0.5304.87-1 | 117.0.5938.132-1~deb11u1 |
chromiumDebian:12 From an advisory covering 3 CVEs | before 117.0.5938.132-1~deb12u1, plus listed versions 113.0.5672.126-1114.0.5735.106-1114.0.5735.106-1~deb11u1114.0.5735.106-1~deb12u1114.0.5735.133-1 Show 37 moreShow less114.0.5735.133-1~deb11u1114.0.5735.133-1~deb12u1114.0.5735.198-1114.0.5735.198-1~deb11u1114.0.5735.198-1~deb12u1114.0.5735.90-1114.0.5735.90-2114.0.5735.90-2~deb11u1114.0.5735.90-2~deb12u1115.0.5790.102-1115.0.5790.102-2115.0.5790.170-1115.0.5790.170-1~deb11u1115.0.5790.170-1~deb12u1115.0.5790.98-1115.0.5790.98-1~deb11u1115.0.5790.98-1~deb12u1115.0.5790.98-2116.0.5845.110-1116.0.5845.110-1~deb11u1116.0.5845.110-1~deb12u1116.0.5845.110-2116.0.5845.140-1116.0.5845.140-1~deb11u1116.0.5845.140-1~deb12u1116.0.5845.180-1116.0.5845.180-1~deb11u1116.0.5845.180-1~deb12u1116.0.5845.96-1116.0.5845.96-1~deb11u1116.0.5845.96-1~deb12u1116.0.5845.96-2117.0.5938.132-1~deb11u1117.0.5938.62-1117.0.5938.62-1~deb11u1117.0.5938.62-1~deb12u1117.0.5938.92-1 | 117.0.5938.132-1~deb12u1 |
chromium-browser-stableMageia:9 From an advisory covering 18 CVEs | before 117.0.5938.132-1.mga9.tainted | 117.0.5938.132-1.mga9.tainted |
chromiumSUSE:Package Hub 15 SP4 From an advisory covering 3 CVEs | before 117.0.5938.132-bp155.2.40.1 | 117.0.5938.132-bp155.2.40.1 |
chromiumSUSE:Package Hub 15 SP5 From an advisory covering 3 CVEs | before 117.0.5938.132-bp155.2.40.1 | 117.0.5938.132-bp155.2.40.1 |
chromiumopenSUSE:Leap 15.4 From an advisory covering 3 CVEs | before 117.0.5938.132-bp155.2.40.1 | 117.0.5938.132-bp155.2.40.1 |
chromiumopenSUSE:Leap 15.5 From an advisory covering 3 CVEs | before 117.0.5938.132-bp155.2.40.1 | 117.0.5938.132-bp155.2.40.1 |
operaopenSUSE:Leap 15.5 NonFree From an advisory covering 3 CVEs | before 103.0.4928.16-lp155.3.12.1 | 103.0.4928.16-lp155.3.12.1 |
operaopenSUSE:Leap 15.4 NonFree From an advisory covering 3 CVEs | before 103.0.4928.16-lp154.2.53.1 | 103.0.4928.16-lp154.2.53.1 |
chromiumopenSUSE:Tumbleweed From an advisory covering 3 CVEs | before 117.0.5938.132-1.1 | 117.0.5938.132-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-5187 is a high vulnerability (CVSS 8.8) in Google Chrome, published September 28, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.81%, the 57th percentile. Fixed in chromium 117.0.5938.132-1~deb12u1.
References
chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_27.html
crbug.com/1475798
debian.org/security/2023/dsa-5508
lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WTRUIS3564P7ZLM2S2IH4Y4KZ327LI4I
Show 19 moreShow less
security.gentoo.org/glsa/202401-34
nvd.nist.gov/vuln/detail/CVE-2023-5187
github.com/advisories/GHSA-hg3r-958g-g8vq
security-tracker.debian.org/tracker/CVE-2023-5187
advisories.mageia.org/MGASA-2023-0283.html
bugs.mageia.org/show_bug.cgi?id=32317
lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XVWTK2X25FKSQAO2JO5SKRXBOHGOHPUO
bugzilla.suse.com/1215776
suse.com/security/cve/CVE-2023-5186
Left out here: 94 versions. The JSON record has them.