A huge collection of 3400+ free website templates JAR theme com WP themes and more at the biggest community-driven free web design site
Home / security-advisories / Google Chrome Zero Day Vulnerability (CVE-2023-2136)

Google Chrome Zero Day Vulnerability (CVE-2023-2136)

Advisory No: TZCERT/SA/2023/04/20

Date of First Release: 20th April 2023

Source: Google

Software Affected:  Google Chrome prior to 112.0.5615.137 (Mac), and Google Chrome prior to 112.0.5615.137/138 (Windows)


Google has released security patches to address the Zero Day vulnerability affecting Google Chrome browser for both Mac and Windows operating systems. This vulnerability could allow an attacker to take control of an affected system.


This vulnerability is tracked as CVE-2023-2136. It is caused by the Integer overflow in Skia in Google Chrome prior to 112.0.5615.137, which allows a remote attacker who had compromised the renderer process to potentially accomplish a sandbox escape via a crafted HTML page. Skia is an open source 2D graphics library used by the browser.


Successful exploitation of this vulnerability may allow the attacker to control of the affected system.


Google has released a patch for this vulnerability. Users and administrators are encouraged to apply necessary updates.


  1. https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop_18.html
  2. https://thehackernews.com/2023/04/google-chrome-hit-by-second-zero-day.html

Check Also

HPE Superdome Flex, Superdome Flex 280 and Compute Scale-up Server 3200 Servers Arbitrary Code Execution (CVE-2021-38578)

Advisory No: TZCERT/SA/2024/04/19 Date of First Release: 19th April 2024 Source: Hewlett Packard Enterprise (HPE) …