CVE-2023-28812: There is a buffer overflow vulnerability in a web browser plug-in could allow an attacker to exploit the vulnerability by sending crafted messages...
9.1
CVSS
Description
There is a buffer overflow vulnerability in a web browser plug-in could allow an attacker to exploit the vulnerability by sending crafted messages to computers installed with this plug-in, which could lead to arbitrary code execution or cause process exception of the plug-in.
Classification
CVE ID: CVE-2023-28812
CVSS Base Severity: CRITICAL
CVSS Base Score: 9.1
Affected Products
Vendor: Hikvision
Product: LocalServiceComponents
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.28% (probability of being exploited)
EPSS Percentile: 68.38% (scored less or equal to compared to others)
EPSS Date: 2025-02-03 (when was this score calculated)