CVE-2023-4762

Exploited in the Wild ✓ Confirmed 0-Day ★ Google Project Zero
Triaged: March 3, 2026 9 articles
VulnLookup ↗ NVD ↗ MITRE ↗ Advisory ↗ P0 Sheet ↗ CISA KEV ↗

EPSS Score

Source: FIRST.org · 2026-05-24
55.8%
probability
This CVE has a 55.8% probability of being exploited in the next 30 days.
0% Top 98.1th percentile of all CVEs 100%
CVSS score unavailable
Neither CIRCL nor NVD returned a CVSS score for this CVE. View on VulnerabilityLookup ↗

Description

Project Zero
Type confusion in V8

Attack Intelligence

Google Project Zero

Discovered
Aug. 16, 2023
Patched
Sept. 5, 2023
Reported by
???
Root Cause Analysis
???

Exploits & PoC

buptsb/CVE-2023-4762

PoC CVE-2023-4762 — buptsb/CVE-2023-4762

25
sherlocksecurity/CVE-2023-4762-Code-Review

PoC CVE-2023-4762 — sherlocksecurity/CVE-2023-4762-Code-Review

0
2 repos — triés par ⭐ Rechercher sur GitHub ↗

Signal Intelligence

Confidenceⓘ
92%
EPSS 55.8%
Mentions 9
Last Seen Jan 16, 2024

CNA Information

Analyst Note

CVE-2023-4762 is confirmed as an actively exploited zero-day in Chrome with a HIGH CVSS score (8.8) and remote code execution capability. Evidence of real-world exploitation is documented in multiple security publications, confirming this is not a theoretical vulnerability but one actively leveraged in attacks.

Threat Actors 6

APT 28
apt_group Information theft and espionage 🇷🇺 RU
Infy
apt_group Information theft and espionage 🇮🇷 IR
APT24
apt_group Information theft and espionage 🇨🇳 CN
UNC1549
apt_group Information theft and espionage 🇮🇷 IR
PassCV
apt_group Information theft and espionage 🇨🇳 CN
APT 5
apt_group Information theft and espionage 🇨🇳 CN

Triage Info

Decided atMar 03, 2026