Google Chrome Skia Integer Overflow Vulnerability (CVE-2023-2136)

A remote attacker, without authentication, can achieve full data confidentiality loss, arbitrary modification of data, complete denial of service or system unavailability. Federal agencies are required to remediate by 2023-05-12 under CISA BOD 22-01.

This is a Integer Overflow (CWE-190) vulnerability in Google Chromium Skia. Integer overflow in Skia in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High) Exploitation requires remote network access, low attack complexity, no authentication required, and user interaction required.

Probably yes if any of these apply:

CISA added this CVE to the Known Exploited Vulnerabilities catalog on 2023-04-21 based on evidence of active exploitation in the wild. Federal agencies required to remediate by 2023-05-12.