CVE-2023-4762: Google Chrome V8 type confusion enables remote code execution

Automated analysis

Generated by VULONE's analysis model from the NVD record, CISA KEV and EPSS data on 17 September 2026. Confidence: high.

high priorityThe flaw allows remote code execution with high impact and is confirmed exploited in CISA KEV, though it requires user interaction to trigger.

What it is

Google Chrome before 116.0.5845.179 contains a type confusion flaw in the V8 JavaScript engine. A crafted HTML page can trigger the confusion and lead to arbitrary code execution in the browser process. The issue affects Chrome and Chromium-based derivatives such as Microsoft Edge, and it was added to CISA's Known Exploited Vulnerabilities catalog.

Impact

An attacker who gets a victim to load a malicious page can execute arbitrary code with the privileges of the browser, giving a path to host compromise. The CVSS vector rates confidentiality, integrity and availability impact as high.

Attack surface

Reached over the network by rendering a crafted HTML page; no authentication is required, but user interaction (opening the page) is needed per the CVSS vector UI:R. The flaw sits in the V8 engine, so any Chromium-based browser processing the page is exposed.

Exploitation

The vulnerability is listed in CISA KEV with a due date of 2024-02-27, indicating known exploitation in the wild. EPSS gives a 30-day probability of 0.41081 (98.59th percentile), and no ransomware campaign use is documented.

What to do

• Update Google Chrome to 116.0.5845.179 or later, and apply the corresponding Microsoft Edge and Chromium updates.
• Apply the vendor patches referenced by Debian, Fedora, Gentoo and Microsoft advisories for packaged Chromium builds.
• If patching is not immediately possible, follow CISA KEV guidance to apply mitigations or discontinue use of the affected product.
• Enforce browser auto-update and verify version compliance across managed endpoints.
• Reduce exposure by restricting browsing to trusted sites and blocking known malicious domains at the network edge.

Detection

• Monitor for Chrome or Chromium processes spawning unexpected child processes or writing executables to user-writable paths.
• Alert on browser crashes or renderer restarts clustered around visits to untrusted or newly registered domains.
• Hunt for exploit delivery via email or web gateways serving HTML pages that trigger V8 anomalies, correlating with proxy logs.
• Track endpoint browser version inventory to flag hosts still running Chrome below 116.0.5845.179.

This assessment is produced automatically and is not human-reviewed. Verify against the vendor advisory before acting on it.