CVE-2023-0129

CVE-2023-0129 is a high-severity heap buffer overflow vulnerability affecting Google Chrome versions prior to 109.0.5414.74. An attacker could exploit this by convincing a user to install a malicious extension, then leveraging a crafted HTML page and specific user interactions to achieve heap corruption. The vulnerability carries a CVSS score of 8.8, indicating a high impact on confidentiality, integrity, and availability, with a network attack vector and low attack complexity requiring user interaction. Currently, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or inclusion in CISA's KEV catalog, though it has received some community discussion and media coverage.