| Package | Affected versions | Patched versions |
|---|---|---|
| CefSharp.Common | < 117.2.20 | 117.2.20 |
| CefSharp.Common.NETCore | < 117.2.20 | 117.2.20 |
Google is aware that an exploit for CVE-2023-5217 exists in the wild.
Description Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
References
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free