NVD - CVE-2023-2136

4 min read Original article ↗

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to [email protected].

URL Source(s) Tag(s)
https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop_18.html CVE, Chrome Release Notes  Vendor Advisory 
https://crbug.com/1432603 CVE, Chrome Issue Tracking  Third Party Advisory 
https://lists.fedoraproject.org/archives/list/[email protected]/message/4AOSGAOPXLBK4A5ZRTVZ4M6QKVLSWMWG/ CVE, Chrome Mailing List 
https://lists.fedoraproject.org/archives/list/[email protected]/message/ES2CDRHR2Y4WY6DNDIAPYZFXJU3ZBFAV/ CVE, Chrome Mailing List 
https://lists.fedoraproject.org/archives/list/[email protected]/message/FEJZMAUB4XP44HSHEBDWEKFGA7DUHY42/ CVE, Chrome Mailing List 
https://lists.fedoraproject.org/archives/list/[email protected]/message/IHHD6KNH4WLUE6JG6HRQZWNAJMHJ32X7/ CVE, Chrome Mailing List 
https://lists.fedoraproject.org/archives/list/[email protected]/message/RJQI63HWZFL6M26Q6UOHKDY6LD2PFC5Z/ CVE, Chrome Mailing List 
https://lists.fedoraproject.org/archives/list/[email protected]/message/SLO7BL2MHZYPY6O3OAEAQL3SKYMGGO6M/ CVE, Chrome Mailing List 
https://security.gentoo.org/glsa/202309-17 CVE, Chrome Third Party Advisory 
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-2136 CISA-ADP US Government Resource 
https://www.debian.org/security/2023/dsa-5393 CVE, Chrome Third Party Advisory 

Change History

18 change records found show changes

Modified Analysis by NIST 10/24/2025 10:07:43 AM

Action Type Old Value New Value
Added Reference Type
CISA-ADP: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-2136 Types: US Government Resource

CVE Modified by CISA-ADP 10/21/2025 7:15:59 PM

Action Type Old Value New Value
Added Reference
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-2136

CVE Modified by CISA-ADP 10/21/2025 4:19:27 PM

Action Type Old Value New Value
Removed Reference
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-2136

CVE Modified by CISA-ADP 10/21/2025 3:20:03 PM

Action Type Old Value New Value
Added Reference
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-2136

Modified Analysis by NIST 2/19/2025 2:40:22 PM

Action Type Old Value New Value

CVE Modified by CISA-ADP 1/28/2025 12:15:13 PM

Action Type Old Value New Value
Added CVSS V3.1
AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Added CWE
CWE-190

CVE Modified by CVE 11/21/2024 2:58:00 AM

Action Type Old Value New Value
Added Reference
https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop_18.html
Added Reference
https://crbug.com/1432603
Added Reference
https://lists.fedoraproject.org/archives/list/[email protected]/message/4AOSGAOPXLBK4A5ZRTVZ4M6QKVLSWMWG/
Added Reference
https://lists.fedoraproject.org/archives/list/[email protected]/message/ES2CDRHR2Y4WY6DNDIAPYZFXJU3ZBFAV/
Added Reference
https://lists.fedoraproject.org/archives/list/[email protected]/message/FEJZMAUB4XP44HSHEBDWEKFGA7DUHY42/
Added Reference
https://lists.fedoraproject.org/archives/list/[email protected]/message/IHHD6KNH4WLUE6JG6HRQZWNAJMHJ32X7/
Added Reference
https://lists.fedoraproject.org/archives/list/[email protected]/message/RJQI63HWZFL6M26Q6UOHKDY6LD2PFC5Z/
Added Reference
https://lists.fedoraproject.org/archives/list/[email protected]/message/SLO7BL2MHZYPY6O3OAEAQL3SKYMGGO6M/
Added Reference
https://security.gentoo.org/glsa/202309-17
Added Reference
https://www.debian.org/security/2023/dsa-5393

CVE Modified by Chrome 5/14/2024 8:57:02 AM

Action Type Old Value New Value

Modified Analysis by NIST 10/20/2023 4:54:42 PM

Action Type Old Value New Value
Changed CPE Configuration
OR
     *cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
     *cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*
     *cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*
     *cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*
OR
     *cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
Added CPE Configuration
OR
     *cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*
     *cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*
     *cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*
Changed Reference Type
https://lists.fedoraproject.org/archives/list/[email protected]/message/ES2CDRHR2Y4WY6DNDIAPYZFXJU3ZBFAV/ No Types Assigned
https://lists.fedoraproject.org/archives/list/[email protected]/message/ES2CDRHR2Y4WY6DNDIAPYZFXJU3ZBFAV/ Mailing List
Changed Reference Type
https://lists.fedoraproject.org/archives/list/[email protected]/message/IHHD6KNH4WLUE6JG6HRQZWNAJMHJ32X7/ Mailing List, Third Party Advisory
https://lists.fedoraproject.org/archives/list/[email protected]/message/IHHD6KNH4WLUE6JG6HRQZWNAJMHJ32X7/ Mailing List
Changed Reference Type
https://lists.fedoraproject.org/archives/list/[email protected]/message/SLO7BL2MHZYPY6O3OAEAQL3SKYMGGO6M/ No Types Assigned
https://lists.fedoraproject.org/archives/list/[email protected]/message/SLO7BL2MHZYPY6O3OAEAQL3SKYMGGO6M/ Mailing List
Changed Reference Type
https://security.gentoo.org/glsa/202309-17 No Types Assigned
https://security.gentoo.org/glsa/202309-17 Third Party Advisory

CVE Modified by Chrome 9/30/2023 7:15:14 AM

Action Type Old Value New Value
Added Reference
https://security.gentoo.org/glsa/202309-17 [No Types Assigned]

CVE Modified by Chrome 5/01/2023 11:15:08 PM

Action Type Old Value New Value
Added Reference
https://lists.fedoraproject.org/archives/list/[email protected]/message/ES2CDRHR2Y4WY6DNDIAPYZFXJU3ZBFAV/ [No Types Assigned]

CVE Modified by Chrome 4/26/2023 10:15:09 PM

Action Type Old Value New Value
Added Reference
https://lists.fedoraproject.org/archives/list/[email protected]/message/SLO7BL2MHZYPY6O3OAEAQL3SKYMGGO6M/ [No Types Assigned]

Initial Analysis by NIST 4/26/2023 4:49:25 PM

Action Type Old Value New Value
Added CVSS V3.1
NIST AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Added CWE
NIST CWE-190
Added CPE Configuration
OR
     *cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* versions up to (excluding) 112.0.5615.137
Added CPE Configuration
OR
     *cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
     *cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*
     *cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*
     *cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*
Changed Reference Type
https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop_18.html No Types Assigned
https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop_18.html Release Notes, Vendor Advisory
Changed Reference Type
https://crbug.com/1432603 No Types Assigned
https://crbug.com/1432603 Issue Tracking, Third Party Advisory
Changed Reference Type
https://lists.fedoraproject.org/archives/list/[email protected]/message/4AOSGAOPXLBK4A5ZRTVZ4M6QKVLSWMWG/ No Types Assigned
https://lists.fedoraproject.org/archives/list/[email protected]/message/4AOSGAOPXLBK4A5ZRTVZ4M6QKVLSWMWG/ Mailing List
Changed Reference Type
https://lists.fedoraproject.org/archives/list/[email protected]/message/FEJZMAUB4XP44HSHEBDWEKFGA7DUHY42/ No Types Assigned
https://lists.fedoraproject.org/archives/list/[email protected]/message/FEJZMAUB4XP44HSHEBDWEKFGA7DUHY42/ Mailing List
Changed Reference Type
https://lists.fedoraproject.org/archives/list/[email protected]/message/IHHD6KNH4WLUE6JG6HRQZWNAJMHJ32X7/ No Types Assigned
https://lists.fedoraproject.org/archives/list/[email protected]/message/IHHD6KNH4WLUE6JG6HRQZWNAJMHJ32X7/ Mailing List, Third Party Advisory
Changed Reference Type
https://lists.fedoraproject.org/archives/list/[email protected]/message/RJQI63HWZFL6M26Q6UOHKDY6LD2PFC5Z/ No Types Assigned
https://lists.fedoraproject.org/archives/list/[email protected]/message/RJQI63HWZFL6M26Q6UOHKDY6LD2PFC5Z/ Mailing List
Changed Reference Type
https://www.debian.org/security/2023/dsa-5393 No Types Assigned
https://www.debian.org/security/2023/dsa-5393 Third Party Advisory

CVE Modified by Chrome 4/26/2023 12:15:10 AM

Action Type Old Value New Value
Added Reference
https://lists.fedoraproject.org/archives/list/[email protected]/message/IHHD6KNH4WLUE6JG6HRQZWNAJMHJ32X7/ [No Types Assigned]

CVE Modified by Chrome 4/23/2023 8:15:14 AM

Action Type Old Value New Value
Added Reference
https://www.debian.org/security/2023/dsa-5393 [No Types Assigned]

CVE Modified by Chrome 4/21/2023 12:15:44 AM

Action Type Old Value New Value
Added Reference
https://lists.fedoraproject.org/archives/list/[email protected]/message/RJQI63HWZFL6M26Q6UOHKDY6LD2PFC5Z/ [No Types Assigned]

CVE Modified by Chrome 4/20/2023 11:15:08 PM

Action Type Old Value New Value
Added Reference
https://lists.fedoraproject.org/archives/list/[email protected]/message/4AOSGAOPXLBK4A5ZRTVZ4M6QKVLSWMWG/ [No Types Assigned]

CVE Modified by Chrome 4/20/2023 3:15:07 AM

Action Type Old Value New Value
Added Reference
https://lists.fedoraproject.org/archives/list/[email protected]/message/FEJZMAUB4XP44HSHEBDWEKFGA7DUHY42/ [No Types Assigned]