Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: May 2023

109 records · 8 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 1 of 2

  • CVE-2023-1669
    33Monitor

    SEOPress < 6.5.0.3 - Admin+ PHP Object Injection

    HighCVSS 7.2No exploitEPSS 17%

    seopress · seopressMay 2, 2023

  • CVE-2023-1730
    51Plan

    SupportCandy < 3.1.5 - Unauthenticated SQLi

    CriticalCVSS 9.8Proof of conceptEPSS 40%

    supportcandy · supportcandyMay 2, 2023

  • CVE-2023-1861
    30Monitor

    Limit Login Attempts < 1.7.2 - Subscriber+ Stored XSS

    MediumCVSS 5.4No exploitEPSS 28%

    limit login attempts project · limit login attemptsMay 2, 2023

  • CVE-2023-32007
    58Plan

    Apache Spark: Shell command injection via Spark UI

    HighCVSS 8.8No exploitEPSS 75%

    apache · sparkMay 2, 2023

  • CVE-2023-29772
    23Monitor

    A Cross-site scripting (XSS) vulnerability in the System Log/General Log page of the administrator web UI in ASUS RT-AC51U wireless router f

    MediumCVSS 5.2No exploitEPSS 11%

    asus · rt-ac51u firmwareMay 2, 2023

  • CVE-2023-2479
    46Plan

    OS Command Injection in appium/appium-desktop

    CriticalCVSS 9.8Proof of conceptEPSS 22%

    appium · appium-desktopMay 2, 2023

  • CVE-2022-47874
    32Monitor

    Improper Access Control in /tc/rpc in Jedox GmbH Jedox 2020.2.5 allows remote authenticated users to view details of database connections vi

    MediumCVSS 6.5Proof of conceptEPSS 21%

    jedox · cloudMay 2, 2023

  • CVE-2022-47875
    38Monitor

    A Directory Traversal vulnerability in /be/erpc.php in Jedox GmbH Jedox 2020.2.5 allows remote authenticated users to execute arbitrary code

    HighCVSS 8.8Proof of conceptEPSS 10%

    jedox · cloudMay 2, 2023

  • CVE-2022-47878
    46Plan

    Incorrect input validation for the default-storage-path in the settings page in Jedox 2020.2.5 allows remote, authenticated users to specify

    HighCVSS 8.8Proof of conceptEPSS 35%

    jedox · jedoxMay 2, 2023

  • CVE-2023-29778
    44Plan

    GL.iNET MT3000 4.1.0 Release 2 is vulnerable to OS Command Injection via /usr/lib/oui-httpd/rpc/logread.

    CriticalCVSS 9.8No exploitEPSS 16%

    gl-inet · gl-mt3000 firmwareMay 2, 2023

  • CVE-2023-30403
    34Monitor

    An issue in the time-based authentication mechanism of Aigital Aigital Wireless-N Repeater Mini_Router v0.131229 allows attackers to bypass

    HighCVSS 7.5No exploitEPSS 13%

    aigital · wireless-n repeater mini router firmwareMay 2, 2023

  • CVE-2022-30995
    60This week

    Sensitive information disclosure due to improper authentication.

    HighCVSS 7.5WeaponizedEPSS 3%

    acronis · cyber backupMay 3, 2023

  • CVE-2022-3405
    40Plan

    Code execution and sensitive information disclosure due to excessive privileges assigned to Acronis Agent.

    HighCVSS 8.8WeaponizedEPSS 5%

    acronis · cyber backupMay 3, 2023

  • CVE-2023-22372
    23Monitor

    BIG-IP Edge Client for Windows and Mac OS vulnerability

    MediumCVSS 5.9No exploitEPSS 0%

    f5 · big-ip access policy managerMay 3, 2023

  • CVE-2023-25826
    60This week

    Remote Code Execution in OpenTSDB

    CriticalCVSS 9.8WeaponizedEPSS 43%

    opentsdb · opentsdbMay 3, 2023

  • CVE-2023-31099
    59Plan

    Zoho ManageEngine OPManager through 126323 allows an authenticated user to achieve remote code execution via probe servers.

    HighCVSS 8.8No exploitEPSS 81%

    zohocorp · manageengine opmanagerMay 3, 2023

  • CVE-2023-2521
    14Monitor

    NEXTU NEXT-7004N POST Request formFilter cross site scripting

    LowCVSS 3.5No exploitEPSS 0%

    ez-net · next-7004n firmwareMay 4, 2023

  • CVE-2023-2522
    38Monitor

    Chengdu VEC40G Network Detection os command injection

    HighCVSS 7.2No exploitEPSS 33%

    feiyuxing · vec40g firmwareMay 4, 2023

  • CVE-2023-2523
    49Plan

    Weaver E-Office unrestricted upload

    CriticalCVSS 9.8Proof of conceptEPSS 32%

    e-office · e-officeMay 4, 2023

  • CVE-2023-20126
    50Plan

    Cisco SPA112 2-Port Phone Adapters Remote Command Execution Vulnerability

    CriticalCVSS 9.8Proof of conceptEPSS 36%

    cisco · spa112 firmwareMay 4, 2023

  • CVE-2023-21492
    48Plan

    Kernel pointers are printed in the log file prior to SMR May-2023 Release 1 allows a privileged local attacker to bypass ASLR.

    MediumCVSS 4.4KEVWeaponizedEPSS 2%

    samsung · androidMay 4, 2023

  • CVE-2023-32235
    42Plan

    Ghost before 5.42.1 allows remote attackers to read arbitrary files within the active theme's folder via /assets/built%2F..%2F..%2F/ directo

    HighCVSS 7.5Proof of conceptEPSS 39%

    ghost · ghostMay 5, 2023

  • CVE-2023-30013
    60This week

    TOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contain a command insertion vulnerability in setting/setTracerouteCfg.

    CriticalCVSS 9.8WeaponizedEPSS 25%

    totolink · x5000r firmwareMay 5, 2023

  • CVE-2023-2554
    37Monitor

    External Control of File Name or Path in unilogies/bumsys

    HighCVSS 7.2No exploitEPSS 29%

    bumsys project · bumsysMay 5, 2023

  • CVE-2023-2564
    52Plan

    OS Command Injection in sbs20/scanservjs

    CriticalCVSS 10.0No exploitEPSS 40%

    scanservjs project · scanservjsMay 7, 2023

  • CVE-2023-2575
    40Plan

    Authenticated Buffer Overflow

    HighCVSS 8.8No exploitEPSS 15%

    advantech · eki-1521 firmwareMay 8, 2023

  • CVE-2023-0603
    39Monitor

    Sloth Logo Customizer <= 2.0.2 - Stored XSS via CSRF

    HighCVSS 8.8No exploitEPSS 13%

    sloth logo customizer project · sloth logo customizerMay 8, 2023

  • CVE-2023-1347
    33Monitor

    Customizer Export/Import < 0.9.6 - Admin+ PHP Object Injection

    HighCVSS 7.2No exploitEPSS 16%

    fastlinemedia · customizer export\/importMay 8, 2023

  • CVE-2023-1650
    49Plan

    ChatBot < 4.4.7 - Unauthenticated PHP Object Injection

    CriticalCVSS 9.8No exploitEPSS 34%

    quantumcloud · wpbotMay 8, 2023

  • CVE-2023-2114
    41Plan

    NEX-Forms < 8.4 - Admin+ SQL Injection

    HighCVSS 7.2Proof of conceptEPSS 44%

    basixonline · nex-formsMay 8, 2023

  • CVE-2023-31133
    44Plan

    Ghost vulnerable to disclosure of private API fields

    HighCVSS 7.5No exploitEPSS 45%

    ghost · ghostMay 8, 2023

  • CVE-2023-32233
    35Monitor

    In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary

    HighCVSS 7.8Proof of conceptEPSS 13%

    linux · linux kernelMay 8, 2023

  • CVE-2023-32071
    57Plan

    XWiki Platform vulnerable to RXSS via editor parameter - importinline template

    CriticalCVSS 9.0No exploitEPSS 70%

    xwiki · xwikiMay 9, 2023

  • CVE-2023-20046
    35Monitor

    A vulnerability in the key-based SSH authentication feature of Cisco StarOS Software could allow an authenticated, remote attacker to elevat

    HighCVSS 8.8No exploitEPSS 0%

    cisco · starosMay 9, 2023

  • CVE-2023-24932
    29Monitor

    Secure Boot Security Feature Bypass Vulnerability

    MediumCVSS 6.7Proof of conceptEPSS 10%

    microsoft · windows 10 1507May 9, 2023

  • CVE-2023-24941
    67This week

    Windows Network File System Remote Code Execution Vulnerability

    CriticalCVSS 9.8No exploitEPSS 94%

    microsoft · windows server 2012May 9, 2023

  • CVE-2023-24949
    38Monitor

    Windows Kernel Elevation of Privilege Vulnerability

    HighCVSS 7.8No exploitEPSS 24%

    microsoft · windows 10 1809May 9, 2023

  • CVE-2023-24950
    46Plan

    Microsoft SharePoint Server Spoofing Vulnerability

    MediumCVSS 6.5No exploitEPSS 67%

    microsoft · sharepoint enterprise serverMay 9, 2023

  • CVE-2023-24955
    83Now

    Microsoft SharePoint Server Remote Code Execution Vulnerability

    HighCVSS 7.2KEVWeaponizedEPSS 84%

    microsoft · sharepoint enterprise serverMay 9, 2023

  • CVE-2023-29325
    55Plan

    Windows OLE Remote Code Execution Vulnerability

    HighCVSS 7.5No exploitEPSS 83%

    microsoft · windows 10 1507May 9, 2023

  • CVE-2023-29336
    73This week

    Win32k Elevation of Privilege Vulnerability

    HighCVSS 7.8KEVWeaponizedEPSS 41%

    microsoft · windows 10 1507May 9, 2023

  • CVE-2023-31472
    36Monitor

    An issue was discovered on GL.iNet devices before 3.216.

    HighCVSS 7.5No exploitEPSS 19%

    gl-inet · gl-s20 firmwareMay 9, 2023

  • CVE-2023-28126
    43Plan

    An authentication bypass vulnerability exists in Avalanche versions 6.3.x and below that could allow an attacker to gain access by exploitin

    MediumCVSS 5.9No exploitEPSS 66%

    ivanti · avalancheMay 9, 2023

  • CVE-2023-28127
    48Plan

    A path traversal vulnerability exists in Avalanche version 6.3.x and below that when exploited could result in possible information disclosu

    HighCVSS 7.5No exploitEPSS 58%

    ivanti · avalancheMay 9, 2023

  • CVE-2023-28128
    53Plan

    An unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.3.x and below that could allow an attacker t

    HighCVSS 7.2WeaponizedEPSS 84%

    ivanti · avalancheMay 9, 2023

  • CVE-2023-31478
    39Monitor

    An issue was discovered on GL.iNet devices before 3.216.

    HighCVSS 7.5Proof of conceptEPSS 29%

    gl-inet · gl-s20 firmwareMay 9, 2023

  • CVE-2023-22361
    37Monitor

    Improper privilege management vulnerability in SkyBridge MB-A100/110 firmware Ver.

    MediumCVSS 6.5No exploitEPSS 35%

    seiko-sol · skybridge mb-a110 firmwareMay 10, 2023

  • CVE-2023-30777
    36Monitor

    WordPress Advanced Custom Fields / Advanced Custom Fields PRO plugins <= 6.1.5 vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 6.1Proof of conceptEPSS 39%

    advancedcustomfields · advanced custom fieldsMay 10, 2023

  • CVE-2022-47137
    19Monitor

    WordPress Ninja Tables Plugin <= 4.3.4 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 4.8No exploitEPSS 0%

    wpmanageninja · ninja tablesMay 10, 2023

  • CVE-2023-30194
    49Plan

    Prestashop posstaticfooter <= 1.0.0 is vulnerable to SQL Injection via posstaticfooter::getPosCurrentHook().

    CriticalCVSS 9.8Proof of conceptEPSS 32%

    prestashop · poststaticfooterMay 10, 2023

  • CVE-2023-2648
    48Plan

    Weaver E-Office uploadify.php unrestricted upload

    CriticalCVSS 9.8Proof of conceptEPSS 28%

    weaver · e-officeMay 11, 2023

  • CVE-2023-31475
    43Plan

    An issue was discovered on GL.iNet devices before 3.216.

    CriticalCVSS 9.8No exploitEPSS 13%

    gl-inet · gl-s20 firmwareMay 11, 2023

  • CVE-2023-29809
    42Plan

    SQL injection vulnerability found in Maximilian Vogt companymaps (cmaps) v.8.0 allows a remote attacker to execute arbitrary code via a craf

    CriticalCVSS 9.8Proof of conceptEPSS 10%

    companymaps project · companymapsMay 11, 2023

  • CVE-2023-32243
    62This week

    WordPress Essential Addons for Elementor Plugin 5.4.0-5.7.1 is vulnerable to Privilege Escalation

    CriticalCVSS 9.8Proof of conceptEPSS 75%

    wpdeveloper · essential addons for elementorMay 12, 2023

  • CVE-2023-27823
    55Plan

    An authentication bypass in Optoma 1080PSTX C02 allows an attacker to access the administration console without valid credentials.

    CriticalCVSS 9.8Proof of conceptEPSS 53%

    optoma · 1080pstxMay 12, 2023

  • CVE-2023-31983
    46Plan

    A Command Injection vulnerability in Edimax Wireless Router N300 Firmware BR-6428NS_v4 allows attacker to execute arbitrary code via the mp

    CriticalCVSS 9.8No exploitEPSS 24%

    edimax · br-6428ns firmwareMay 12, 2023

  • CVE-2023-1698
    64This week

    WAGO: WBM Command Injection in multiple products

    CriticalCVSS 9.8Proof of conceptEPSS 81%

    wago · compact controller 100 firmwareMay 15, 2023

  • CVE-2023-1549
    33Monitor

    Ad Inserter < 2.7.27 - Admin+ PHP Object Injection

    HighCVSS 7.2No exploitEPSS 16%

    ad inserter project · ad inserterMay 15, 2023

  • CVE-2023-32068
    41Plan

    URL Redirection to Untrusted Site in XWiki

    MediumCVSS 6.1Proof of conceptEPSS 55%

    xwiki · xwikiMay 15, 2023

  • CVE-2023-32985
    39Monitor

    Jenkins Sidebar Link Plugin 2.2.1 and earlier does not restrict the path of files in a method implementing form validation, allowing attacke

    MediumCVSS 4.3No exploitEPSS 72%

    jenkins · sidebar linkMay 16, 2023

  • CVE-2023-32986
    53Plan

    Jenkins File Parameter Plugin 285.v757c5b_67a_c25 and earlier does not restrict the name (and resulting uploaded file name) of Stashed File

    HighCVSS 8.8No exploitEPSS 60%

    jenkins · file parametersMay 16, 2023

  • CVE-2023-2723
    40Plan

    Use after free in DevTools in Google Chrome prior to 113.0.5672.126 allowed a remote attacker who had compromised the renderer process to po

    HighCVSS 8.8No exploitEPSS 15%

    google · chromeMay 16, 2023

  • CVE-2023-2724
    44Plan

    Type confusion in V8 in Google Chrome prior to 113.0.5672.126 allowed a remote attacker to potentially exploit heap corruption via a crafted

    HighCVSS 8.8No exploitEPSS 29%

    google · chromeMay 16, 2023

  • CVE-2023-2725
    42Plan

    Use after free in Guest View in Google Chrome prior to 113.0.5672.126 allowed an attacker who convinced a user to install a malicious extens

    HighCVSS 8.8No exploitEPSS 24%

    google · chromeMay 16, 2023

  • CVE-2023-2745
    45Plan

    WordPress Core < 6.2.1 - Directory Traversal

    MediumCVSS 5.4Proof of conceptEPSS 79%

    wordpress · wordpressMay 17, 2023

  • CVE-2023-31902
    60This week

    RPA Technology Mobile Mouse 3.6.0.4 is vulnerable to Remote Code Execution (RCE).

    CriticalCVSS 9.8WeaponizedEPSS 8%

    mobilemouse · mobile mouseMay 17, 2023

  • CVE-2023-2766
    46Plan

    Weaver OA jx2_config.ini file access

    HighCVSS 7.5Proof of conceptEPSS 54%

    weaver · e-officeMay 17, 2023

  • CVE-2023-20159
    42Plan

    Cisco Small Business Series Switches Buffer Overflow Vulnerabilities

    CriticalCVSS 9.8No exploitEPSS 10%

    cisco · business 250-16p-2g firmwareMay 17, 2023

  • CVE-2023-20160
    42Plan

    Cisco Small Business Series Switches Buffer Overflow Vulnerabilities

    CriticalCVSS 9.8No exploitEPSS 10%

    cisco · business 250-16p-2g firmwareMay 17, 2023

  • CVE-2023-20161
    42Plan

    Cisco Small Business Series Switches Buffer Overflow Vulnerabilities

    CriticalCVSS 9.8No exploitEPSS 10%

    cisco · business 250-16p-2g firmwareMay 17, 2023

  • CVE-2023-20189
    42Plan

    Cisco Small Business Series Switches Buffer Overflow Vulnerabilities

    CriticalCVSS 9.8No exploitEPSS 11%

    cisco · business 250-16p-2g firmwareMay 17, 2023

  • CVE-2023-28709
    44Plan

    Apache Tomcat: Fix for CVE-2023-24998 is incomplete

    HighCVSS 7.5No exploitEPSS 48%

    apache · tomcatMay 22, 2023

  • CVE-2023-31742
    40Plan

    There is a command injection vulnerability in the Linksys WRT54GL router with firmware version 4.30.18.006.

    HighCVSS 7.2WeaponizedEPSS 9%

    linksys · wrt54gl firmwareMay 22, 2023

  • CVE-2023-31689
    45Plan

    In Wcms 0.3.2, an attacker can send a crafted request from a vulnerable web application backend server /wcms/wex/html.php via the finish par

    CriticalCVSS 9.8No exploitEPSS 20%

    wcms · wcmsMay 22, 2023

  • CVE-2023-29919
    54Plan

    SolarView Compact <= 6.0 is vulnerable to Insecure Permissions.

    CriticalCVSS 9.1Proof of conceptEPSS 60%

    contec · solarview compact firmwareMay 22, 2023

  • CVE-2022-0357
    31Monitor

    Improper Quoting Path Issue in Bitdefender Total Security

    HighCVSS 7.8No exploitEPSS 0%

    bitdefender · antivirus plusMay 24, 2023

  • CVE-2023-33009
    77This week

    A buffer overflow vulnerability in the notification function in Zyxel ATP series firmware versions 4.60 through 5.36 Patch 1, USG FLEX serie

    CriticalCVSS 9.8KEVWeaponizedEPSS 28%

    zyxel · atp100 firmwareMay 24, 2023

  • CVE-2023-33010
    78This week

    A buffer overflow vulnerability in the ID processing function in Zyxel ATP series firmware versions 4.32 through 5.36 Patch 1, USG FLEX seri

    CriticalCVSS 9.8KEVWeaponizedEPSS 29%

    zyxel · atp100 firmwareMay 24, 2023

  • CVE-2023-33246
    98Now

    Apache RocketMQ: Possible remote code execution vulnerability when using the update configuration function

    CriticalCVSS 9.8KEVWeaponizedEPSS 96%

    apache · rocketmqMay 24, 2023

  • CVE-2023-2868
    95Now

    Remote Code injection in Barracuda Email Security Gateway

    CriticalCVSS 9.8KEVWeaponizedEPSS 86%

    barracuda · email security gateway 300 firmwareMay 24, 2023

  • CVE-2023-2732
    59Plan

    MStore API <= 3.9.2 - Authentication Bypass

    CriticalCVSS 9.8Proof of conceptEPSS 67%

    inspireui · mstore apiMay 24, 2023

  • CVE-2023-30145
    53Plan

    Camaleon CMS v2.7.0 was discovered to contain a Server-Side Template Injection (SSTI) vulnerability via the formats parameter.

    CriticalCVSS 9.8Proof of conceptEPSS 46%

    tuzitio · camaleon cmsMay 26, 2023

  • CVE-2023-33440
    32Monitor

    Sourcecodester Faculty Evaluation System v1.0 is vulnerable to arbitrary code execution via /eval/ajax.php?action=save_user.

    HighCVSS 7.2Proof of conceptEPSS 14%

    faculty evaluation system project · faculty evaluation systemMay 26, 2023

  • CVE-2023-2825
    60This week

    An issue has been discovered in GitLab CE/EE affecting only version 16.0.0.

    HighCVSS 7.5WeaponizedEPSS 71%

    gitlab · gitlabMay 26, 2023

  • CVE-2023-32315
    90Now

    Openfire administration console authentication bypass

    HighCVSS 7.5KEVWeaponizedEPSS 99%

    igniterealtime · openfireMay 26, 2023

  • CVE-2023-2924
    46Plan

    Supcon SimField reportupload.aspx unrestricted upload

    CriticalCVSS 9.8No exploitEPSS 24%

    supcontech · simfield firmwareMay 27, 2023

  • CVE-2023-2928
    50Plan

    DedeCMS article_allowurl_edit.php code injection

    HighCVSS 8.8Proof of conceptEPSS 51%

    dedecms · dedecmsMay 27, 2023

  • CVE-2023-2947
    46Plan

    Cross-site Scripting (XSS) - Stored in openemr/openemr

    MediumCVSS 4.8No exploitEPSS 90%

    open-emr · openemrMay 27, 2023

  • CVE-2023-2948
    53Plan

    Cross-site Scripting (XSS) - Generic in openemr/openemr

    MediumCVSS 6.1Proof of conceptEPSS 96%

    open-emr · openemrMay 28, 2023

  • CVE-2022-24627
    47Plan

    An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752.

    CriticalCVSS 9.8Proof of conceptEPSS 26%

    audiocodes · device manager expressMay 29, 2023

  • CVE-2022-24629
    50Plan

    An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752.

    CriticalCVSS 9.8Proof of conceptEPSS 37%

    audiocodes · device manager expressMay 29, 2023

  • CVE-2022-24630
    35Monitor

    An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752.

    HighCVSS 7.2Proof of conceptEPSS 23%

    audiocodes · device manager expressMay 29, 2023

  • CVE-2022-24631
    33Monitor

    An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752.

    MediumCVSS 5.4No exploitEPSS 41%

    audiocodes · device manager expressMay 29, 2023

  • CVE-2022-24632
    29Monitor

    An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752.

    MediumCVSS 5.3Proof of conceptEPSS 27%

    audiocodes · device manager expressMay 29, 2023

  • CVE-2023-30253
    60This week

    Dolibarr before 17.0.1 allows remote code execution by an authenticated user via an uppercase manipulation: <?PHP instead of <?php in inject

    HighCVSS 8.8WeaponizedEPSS 82%

    dolibarr · dolibarr erp\/crmMay 29, 2023

  • CVE-2023-0329
    34Monitor

    Elementor Website Builder < 3.12.2 - Admin+ SQLi

    HighCVSS 7.2No exploitEPSS 19%

    elementor · website builderMay 30, 2023

  • CVE-2023-2288
    40Plan

    Otter - Gutenberg Blocks < 2.2.6 - Author+ PHAR Deserialization

    HighCVSS 8.8No exploitEPSS 17%

    themeisle · otterMay 30, 2023

  • CVE-2023-2650
    49Plan

    Possible DoS translating ASN.1 object identifiers

    MediumCVSS 6.5No exploitEPSS 75%

    openssl · opensslMay 30, 2023

  • CVE-2023-31185
    34Monitor

    ROZCOM server framework

    HighCVSS 7.5No exploitEPSS 12%

    rozcom · rozcom clientMay 30, 2023

  • CVE-2023-2935
    42Plan

    Type Confusion in V8 in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted

    HighCVSS 8.8No exploitEPSS 23%

    google · chromeMay 30, 2023