CVE-2023-6706

HIGH 8.8

CVSS Score

8.8

EPSS Score

0.0%

EPSS Percentile

0th

Use after free in FedCM in Google Chrome prior to 120.0.6099.109 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Vendor	google
Product	chrome
Ecosystems	Browser Android Cloud Chrome
Industries	Technology
Published	Dec 14, 2023
Last Updated	Feb 25, 2026

Stay Ahead of the Next One

Get instant alerts for google chrome

Be the first to know when new high vulnerabilities affecting google chrome are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Google / Chrome

120.0.6099.109 < 120.0.6099.109

References

NVD ↗ CVE.org ↗ EPSS Data ↗

chromereleases.googleblog.com: https://chromereleases.googleblog.com/2023/12/stable-channel-update-for-desktop_12.html crbug.com: https://crbug.com/1500921 lists.fedoraproject.org: https://lists.fedoraproject.org/archives/list/[email protected]/message/6NWZ23ZJ62XKWVNGHSIZQYILVJWH5BLI/ security.gentoo.org: https://security.gentoo.org/glsa/202401-34