CYBERSIXT Signal Over Noise
All CVEs
Vulnerability intelligence

CVE-2023-4863

Google Chromium WebP Heap-Based Buffer Overflow Vulnerability

Google Chromium WebP

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)

CVSS Score
8.8
High
EPSS — Exploit Probability
100%
Riskier than 100% of all CVEs · checked 2026-10-16
Exploitation
Confirmed in the wild
KEV since 2023-09-13
Remediation
Patch available
Federal deadline 2023-10-04
CISA required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Deadline for federal agencies: 2023-10-04.

NVD entry Vendor patch PoC / advisory CISA KEV

1 article across 1 outlet · first covered Oct 16, 2026 · latest Oct 16, 2026

Coverage timeline

Related CVEs — Google

CVE-2026-110152 CVE-2026-110136 CVE-2026-110147 CVE-2026-85045 CVE-2026-78952 CVE-2026-110149 CVE-2026-110161 CVE-2026-110165