CVE-2023-0696

Publication date 7 February 2023

Last updated 26 August 2025

Ubuntu priority

Medium

Why this priority?

Cvss 3 Severity Score

8.8 · High

Score breakdown

Description

Type confusion in V8 in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Read the notes from the security team

Status

Package Ubuntu Release Status
chromium-browser 23.04 lunar
Not affected
22.10 kinetic
Not affected
22.04 LTS jammy
Not affected
20.04 LTS focal Not in release
18.04 LTS bionic
Fixed 110.0.5481.100-0ubuntu0.18.04.1
16.04 LTS xenial Ignored end of standard support
14.04 LTS trusty Ignored end of standard support

Notes

alexmurray

The Debian chromium source package is called chromium-browser in Ubuntu

mdeslaur

starting with Ubuntu 19.10, the chromium-browser package is just a script that installs the Chromium snap

Severity score breakdown

CVSS version: CVSS v3.0

Base score 8.8 · High

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References

Related Ubuntu Security Notices (USN)

    • USN-5881-1
    • Chromium vulnerabilities
    • 21 February 2023

Other references

Access our resources on patching vulnerabilities