April 19, 2023, 1:54 p.m. | /u/Beef_Studpile

cybersecurity www.reddit.com

[https://www.bleepingcomputer.com/news/security/google-patches-another-actively-exploited-chrome-zero-day/](https://www.bleepingcomputer.com/news/security/google-patches-another-actively-exploited-chrome-zero-day/)

Tl;DR: Remote Sandbox escape vuln ([CVE-2023-2136](https://nvd.nist.gov/vuln/detail/CVE-2023-2136)).

* CVSSv3 = not calculated, guessing 7.0-9.0 range
* Remote=yes
* ACE = not confirmed
* Interaction required = yes
* Patch available
* 112.0.5615.138 or newer
* Scope: = Chromium
* Edge and other browsers in-scope
* Exploited in wild = maybe? (google hasn't released much information on this claim)

\--------

[MFW](https://youtu.be/Ea8GyscSFaQ) seeing this in the news this morning.

ace browsers chrome chromium claim cybersecurity edge exploited google information patch patches scope vuln yes zero-day

CyberSOC Technical Lead

@ Integrity360 | Sandyford, Dublin, Ireland

Cyber Security Strategy Consultant

@ Capco | New York City

Cyber Security Senior Consultant

@ Capco | Chicago, IL

Sr. Product Manager

@ MixMode | Remote, US

Corporate Intern - Information Security (Year Round)

@ Associated Bank | US WI Remote

Senior Offensive Security Engineer

@ CoStar Group | US-DC Washington, DC