CVE-2023-5218

Use after free in Site Isolation in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)

• CWE-416
• CWE-416

• https://chromereleases.googleblog.com/2023/10/stable-channel-update-for-desktop_10.htmlRelease Notes, Vendor Advisory
• https://crbug.com/1487110Permissions Required
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F5QCMP6KKWPDZZLFU7YXSZDHEKOE7BXO/Mailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M4GHJ3FK5NPHDRUR4OJOI4UU6FKSOOGG/Mailing List, Third Party Advisory
• https://security.gentoo.org/glsa/202311-11Third Party Advisory
• https://security.gentoo.org/glsa/202312-07Third Party Advisory
• https://security.gentoo.org/glsa/202401-34
• https://www.debian.org/security/2023/dsa-5526Third Party Advisory
• https://chromereleases.googleblog.com/2023/10/stable-channel-update-for-desktop_10.htmlRelease Notes, Vendor Advisory
• https://crbug.com/1487110Permissions Required
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F5QCMP6KKWPDZZLFU7YXSZDHEKOE7BXO/Mailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M4GHJ3FK5NPHDRUR4OJOI4UU6FKSOOGG/Mailing List, Third Party Advisory
• https://security.gentoo.org/glsa/202311-11Third Party Advisory
• https://security.gentoo.org/glsa/202312-07Third Party Advisory
• https://security.gentoo.org/glsa/202401-34
• https://www.debian.org/security/2023/dsa-5526Third Party Advisory

Published

Oct 11, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-52174XnView Classic before 2.51.3 on Windows has a Write Access V…9.8
• CVE-2023-52175Improper Neutralization of Input During Web Page Generation …5.4
• CVE-2023-52176Authentication Bypass by Spoofing vulnerability in miniorang…5.3
• CVE-2023-52177Missing Authorization vulnerability in SoftLab Integrate Goo…6.3
• CVE-2023-52178Improper Neutralization of Input During Web Page Generation …5.4
• CVE-2023-52179Missing Authorization vulnerability in WebCodingPlace Produc…5.4
• CVE-2023-52180Improper Neutralization of Special Elements used in an SQL C…8.1
• CVE-2023-52181Deserialization of Untrusted Data vulnerability in Presslabs…9.8
• CVE-2023-52182Deserialization of Untrusted Data vulnerability in ARI Soft …8.8
• CVE-2023-52183Missing Authorization vulnerability in WebToffee WordPress B…5.4
• CVE-2023-52184Cross-Site Request Forgery (CSRF) vulnerability in WP Job Po…8.8
• CVE-2023-52185Exposure of Sensitive Information to an Unauthorized Actor v…7.5