← back
CVE-2023-6345

CVE-2023-6345

CVSS 9.6 CRITICALEPSS 19.6%● KEVCWE-190
In short

A mathematical error in Chrome's graphics engine allowed attackers who gained control of the browser's renderer to break out of Chrome's security sandbox using a specially crafted file. This is critical because it lets attackers access your entire computer.

Technical detail

Integer overflow in Skia graphics library allows sandbox escape when renderer process is compromised. Attack requires prior renderer compromise and malicious file delivery; successful exploitation grants system-level code execution beyond sandbox boundaries.

Summary generated and translated by AI from the official description.
Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Affected products
Google · Chrome

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →