Medium WID-SEC-2023-0195 4 CVEs

Google Chrome und Microsoft Edge: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff

Published Jan 24, 2023 · Updated Feb 21, 2023 · Revision 5 · de-DE

Vendor: Debian Vendor: Google Vendor: Microsoft Vendor: Ubuntu Product: Chrome Product: Chrome < LTC-108.0.5359.219 Product: Chrome 109.0.5414.119 Product: Edge Product: Edge < 109.0.1518.70 Product: Edge Extended Stable Channel < 108.0.1462.95 Product: Linux Product: Linux Platform: Linux Platform: macOS Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Chrome und Microsoft Edge ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.

Product

Chrome ist ein Internet-Browser von Google.
Edge ist ein Web Browser von Microsoft.

Vulnerabilities 4

High 8.8

CVE-2023-0471

Use after free in WebTransport in Google Chrome prior to 109.0.5414.119 allowed a remote attacker to potentially exploi…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Jan 24, 2023
High 8.8

CVE-2023-0472

Use after free in WebRTC in Google Chrome prior to 109.0.5414.119 allowed a remote attacker to potentially exploit heap…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine

Jan 24, 2023
High 8.8

CVE-2023-0473

Type Confusion in ServiceWorker API in Google Chrome prior to 109.0.5414.119 allowed a remote attacker to potentially e…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Jan 24, 2023
High 8.8

CVE-2023-0474

Use after free in GuestView in Google Chrome prior to 109.0.5414.119 allowed an attacker who convinced a user to instal…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Jan 24, 2023

Revision history

2023-02-21 #5
Neue Updates von Ubuntu aufgenommen
2023-01-31 #4
Neue Updates aufgenommen
2023-01-29 #3
Referenz(en) aufgenommen: FEDORA-2023-FD4786CC83
2023-01-26 #2
Neue Updates aufgenommen
2023-01-24 #1
Initiale Fassung

References

Ubuntu Security Notice USN-5881-1 vom 2023-02-21
https://ubuntu.com/security/notices/USN-5881-1
Long Term Support Channel Update for ChromeOS
https://chromereleases.googleblog.com/2023/01/long-term-support-channel-update-for_31.html
Debian Security Advisory DSA-5328 vom 2023-01-26
https://lists.debian.org/debian-security-announce/2023/msg00017.html
Release notes for Microsoft Edge Security Updates
https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security
Release notes for Microsoft Edge Security Updates vom 2023-01-24
https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security
Chrome Releases: Stable Channel Update vom 2023-01-24
http://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop_24.html