CVE-2023-4762

CVE-2023-4762 is a software vulnerability, specifically a remote code execution flaw in the Chrome web browser. This vulnerability was identified by researchers from Google's Threat Analysis Group (TAG) in September 2023, around the same time Apple disclosed its own zero-day bugs. The vulnerability was found to be exploited as part of an exploit chain developed by a commercial software company named Intellexa. Intellexa was discovered to have been using this exploit chain, which included the Chrome zero-day CVE-2023-4762, to install a spying tool called Predator on Android devices. The delivery of Predator was achieved through two methods: the AitM injection and via one-time links sent directly to the target device. These activities were detected and reported by Google TAG, pointing out the abuse of the Chrome zero-day vulnerability. The exploitation of CVE-2023-4762 by Intellexa was not isolated to general Android devices but was specifically noted in Egypt. Google TAG identified Intellexa as a surveillance vendor, abusing the Chrome zero-day vulnerability to drop the Predator spying tool on targeted Android devices within the region. This revelation underscores the potential severity and global security implications of such software vulnerabilities.