CVE-2023-2033

Exploited in the Wild ✓ Confirmed 0-Day ★ Google Project Zero
Triaged: March 3, 2026 13 articles
VulnLookup ↗ NVD ↗ MITRE ↗ Advisory ↗ P0 Sheet ↗ CISA KEV ↗

EPSS Score

Source: FIRST.org · 2026-05-24
22.79%
probability
This CVE has a 22.79% probability of being exploited in the next 30 days.
0% Top 96.0th percentile of all CVEs 100%
CVSS score unavailable
Neither CIRCL nor NVD returned a CVSS score for this CVE. View on VulnerabilityLookup ↗

Description

Project Zero
Type confusion in V8

Attack Intelligence

Google Project Zero

Discovered
April 11, 2023
Patched
April 14, 2023
Reported by
Clement Lecigne of the Google Threat Analysis Group
Root Cause Analysis
???

Exploits & PoC

mistymntncop/CVE-2023-2033

PoC CVE-2023-2033 — mistymntncop/CVE-2023-2033

65
sandumjacob/CVE-2023-2033-Analysis

A collection of resources and information about CVE-2023-2033

19
2 repos — triés par ⭐ Rechercher sur GitHub ↗

Signal Intelligence

Confidenceⓘ
92%
EPSS 22.79%
Mentions 13
Last Seen Jan 16, 2024

CNA Information

Analyst Note

CVE-2023-2033 is confirmed as a high-severity type confusion vulnerability in Chrome V8 with active exploitation documented by multiple reputable sources including BleepingComputer reporting it as an actively exploited zero-day. The high CVSS score (8.8), official vendor disclosure, and evidence of real-world attacks provide strong confirmation of this vulnerability's legitimacy and severity.

Threat Actors 6

APT 28
apt_group Information theft and espionage 🇷🇺 RU
Infy
apt_group Information theft and espionage 🇮🇷 IR
APT24
apt_group Information theft and espionage 🇨🇳 CN
UNC1549
apt_group Information theft and espionage 🇮🇷 IR
PassCV
apt_group Information theft and espionage 🇨🇳 CN
APT 5
apt_group Information theft and espionage 🇨🇳 CN

Triage Info

Decided atMar 03, 2026