Vulnerabilities

CVSS

8.8 High

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Risk score

100.0

Known exploited

CISA KEV

Published

2023-09-12

Status

Analyzed

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)

Weaknesses

CWE-787

Coverage 1

ransomware

AI-Generated Browser Ransomware Abuses Chromium API on Windows and Android

A new type of ransomware, dubbed ‘InfernoGrabber v9.0’, has emerged utilizing AI-generated code to exploit vulnerabilities in Chromium-based browsers on Windows and Android. The malware, created using the DeepSeek AI mod…

The Hacker News · Jul 1, 2026 High

CVE-2023-4863USairansomwarebrowser

All articles mentioning it

Advisories and references

• openwall.com/lists/oss-security/2023/09/21/4
• openwall.com/lists/oss-security/2023/09/22/1
• openwall.com/lists/oss-security/2023/09/22/3
• openwall.com/lists/oss-security/2023/09/22/4
• openwall.com/lists/oss-security/2023/09/22/5
• openwall.com/lists/oss-security/2023/09/22/6
• openwall.com/lists/oss-security/2023/09/22/7
• openwall.com/lists/oss-security/2023/09/22/8
• openwall.com/lists/oss-security/2023/09/26/1
• openwall.com/lists/oss-security/2023/09/26/7