CVE-2023-4863: chromium (exact versions not specified); +3 more affected products

CVE-2023-4863 affects chromium. EPSS 0.99979 (percentile 0.99981), scored 20-Oct-2026. Fixed version: 117.0.5938.62-1. Fixed version: 117.0.5938.62-1. Fixed version: 117.0.5938.62-1. Fixed version: 102.15.1esr-1~deb12u1. Fixed version: 115.2.1esr-1. Fixed version: 115.2.1esr-1. Fixed version: 1.2.4-0.2+deb12u1. Fixed version: 1.2.4-0.3. Fixed version: 1.2.4-0.3. Fixed version: 1:102.15.1-1~deb12u1. Fixed version: 1:115.2.2-1. Fixed version: 1:115.2.2-1.

Affected technology

chromium · Exact affected versions not specified by the source
Vendor not specified by the source

firefox-esr · Exact affected versions not specified by the source
Vendor not specified by the source

libwebp · Exact affected versions not specified by the source
Vendor not specified by the source

thunderbird · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

Published 21-Oct-2026 15:29 UTC

Product: chromium
CCR priority: 25.0 /100 (P4)
EPSS: 0.99979 · percentile 0.99981 · 2026-10-20
KEV: no

Provenance

OSV.dev · Source record · observed 2026-10-21 07:07:21.683489+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2023-4863.html