Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Chrome ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand zu verursachen und vertrauliche Informationen offenzulegen.
Product
Chrome ist ein Internet-Browser von Google.
Vulnerabilities 22
-
High 8.8
Use after free in Network Service in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially expl…
KEV Mar 30, 2023 -
High 8.8
Use after free in WebSQL in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap …
-
High 8.8
Use after free in Layout in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap …
-
High 8.8
Use after free in WebSQL in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap …
-
High 8.8
Use after free in PhoneHub in Google Chrome on Chrome OS prior to 105.0.5195.52 allowed a remote attacker to potentiall…
-
High 8.8
Heap buffer overflow in Screen Capture in Google Chrome on Chrome OS prior to 105.0.5195.52 allowed a remote attacker w…
-
High 8.8
Insufficient validation of untrusted input in V8 in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to p…
-
High 8.8
Use after free in Browser Tag in Google Chrome prior to 105.0.5195.52 allowed an attacker who convinced a user to insta…
-
High 8.8
Use after free in SplitScreen in Google Chrome on Chrome OS, Lacros prior to 105.0.5195.52 allowed a remote attacker wh…
-
High 8.8
Heap buffer overflow in WebUI in Google Chrome on Chrome OS prior to 105.0.5195.52 allowed a remote attacker who convin…
-
High 8.8
Heap buffer overflow in Exosphere in Google Chrome on Chrome OS, Lacros prior to 105.0.5195.52 allowed a remote attacke…
-
High 8.8
Heap buffer overflow in Window Manager in Google Chrome on Chrome OS, Lacros prior to 105.0.5195.52 allowed a remote at…
-
High 8.8
Use after free in Passwords in Google Chrome prior to 105.0.5195.52 allowed a remote attacker who convinced a user to e…
-
High 8.8
Use after free in Sign-In Flow in Google Chrome prior to 105.0.5195.52 allowed a remote attacker who convinced a user t…
-
High 8.8
Use after free in Tab Strip in Google Chrome on Chrome OS, Lacros prior to 105.0.5195.52 allowed a remote attacker who …
-
Medium 6.8
Inappropriate implementation in Chrome OS lockscreen in Google Chrome on Chrome OS prior to 105.0.5195.52 allowed a loc…
-
Medium 6.5
Inappropriate implementation in Site Isolation in Google Chrome prior to 105.0.5195.52 allowed a remote attacker who ha…
-
Medium 6.5
Insufficient policy enforcement in Extensions API in Google Chrome prior to 105.0.5195.52 allowed an attacker who convi…
-
Medium 6.5
Insufficient policy enforcement in DevTools in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potent…
-
Medium 6.5
Insufficient policy enforcement in Content Security Policy in Google Chrome prior to 105.0.5195.52 allowed a remote att…
-
Medium 6.5
Inappropriate implementation in iframe Sandbox in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to lea…
-
Medium 4.3
Inappropriate implementation in Pointer Lock in Google Chrome on Mac prior to 105.0.5195.52 allowed a remote attacker t…
Revision history
-
#7
Aktive Ausnutzung gemeldet
-
#6
Neue Updates von Gentoo aufgenommen
-
#5
Referenz(en) aufgenommen: FEDORA-2022-B49C9BC07A
-
#4
Referenz(en) aufgenommen: FEDORA-2022-3CA063941B, FEDORA-2022-3F28AA88CF
-
#3
CVE ergänzt
-
#2
Neue Updates von Debian aufgenommen
-
#1
Initiale Fassung
References
-
CISA Known Exploited Vulnerabilities Catalog vom 2023-03-30
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
-
Stable Channel Update for Desktop - Google vom 2022-08-30
http://chromereleases.googleblog.com/2022/08/stable-channel-update-for-desktop_30.html
-
Debian Security Advisory DSA-5223 vom 2022-09-01
https://lists.debian.org/debian-security-announce/2022/msg00192.html
-
Gentoo Linux Security Advisory GLSA-202209-23 vom 2022-09-29
https://security.gentoo.org/glsa/202209-23