10 new vulnerabilities disclosed by Talos, including use-after-free issue in Google Chrome

Summary: Cisco Talos disclosed 10 vulnerabilities over two weeks across several software products, including a use-after-free flaw in Google Chrome (TALOS-2023-1751, CVE-2023-3421) that an attacker could trigger by luring a target to a crafted HTML page. Eight of the issues are in Accusoft ImageGear, four of which carry a CVSS score of 9.8, and Talos also reported a use-after-free in Hancom Office's HWord (CVE-2023-32541) exploitable through a malicious .doc file.
What's compelling: Four ImageGear flaws at 9.8 out of 10 allow arbitrary code execution from a crafted file, and the Chrome bug needs only a visit to a malicious page - both are entry points that don't require a user to install anything.

Read the original at Cisco Talos ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2023-23567 CVE-2023-32541 CVE-2023-32653 CVE-2023-3421 CVE-2023-35002 CVE-2023-39453 CVE-2023-40163
Related: The security pitfalls of social media sites offering ID-based authentication Cyber Risks ·
Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026