High WID-SEC-2023-0302 10 CVEs

Google Chrome und Microsoft Edge: Mehrere Schwachstellen

Published Feb 7, 2023 · Updated Oct 1, 2023 · Revision 7 · de-DE

Vendor: Debian Vendor: gentoo Vendor: Google Vendor: IGEL Vendor: Microsoft Vendor: Ubuntu Product: Chrome < 110 Product: Edge Product: Edge < 110.0.1587.41 Product: Linux Product: Linux Product: Linux Product: OS < 11.08.290 Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Chrome und Microsoft Edge ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen, einen Denial of Service Zustand herbeizuführen oder Sicherheitsvorkehrungen zu umgehen.

Product

Chrome ist ein Internet-Browser von Google.
Edge ist ein Web Browser von Microsoft.

Vulnerabilities 10

High 8.8

CVE-2023-0698

Out of bounds read in WebRTC in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to perform an out of bou…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine

Feb 7, 2023
High 8.8

CVE-2023-0699

Use after free in GPU in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to potentially exploit heap cor…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Feb 7, 2023
High 7.5

CVE-2023-0705

Integer overflow in Core in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who had one a race condition…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Feb 7, 2023
Medium 6.5

CVE-2023-0700

Inappropriate implementation in Download in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to potential…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Feb 7, 2023
Medium 6.5

CVE-2023-0704

Insufficient policy enforcement in DevTools in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to bypass…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Feb 7, 2023
Unscored —

CVE-2023-0696

Type confusion in V8 in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to potentially exploit heap corr…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Feb 7, 2023
Unscored —

CVE-2023-0697

Inappropriate implementation in Full screen mode in Google Chrome on Android prior to 110.0.5481.77 allowed a remote at…

Google Chrome chromium Browsers Debian

Feb 7, 2023
Unscored —

CVE-2023-0701

Heap buffer overflow in WebUI in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who convinced a user to…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Feb 7, 2023
Unscored —

CVE-2023-0702

Type confusion in Data Transfer in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who convinced a user …

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Feb 7, 2023
Unscored —

CVE-2023-0703

Type confusion in DevTools in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who convinced a user to en…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Feb 7, 2023

Revision history

2023-10-01 #7
Neue Updates von Gentoo aufgenommen
2023-03-22 #6
Neue Updates von IGEL aufgenommen
2023-02-21 #5
Neue Updates von Ubuntu aufgenommen
2023-02-12 #4
Referenz(en) aufgenommen: FEDORA-2023-4E6353C6F7
2023-02-09 #3
Neue Updates aufgenommen
2023-02-08 #2
Neue Updates von Debian aufgenommen
2023-02-07 #1
Initiale Fassung

References

Gentoo Linux Security Advisory GLSA-202309-17 vom 2023-09-30
https://security.gentoo.org/glsa/202309-17
IGEL Security Notice ISN-2023-03 vom 2023-03-22
https://kb.igel.com/securitysafety/en/isn-2023-03-chromium-vulnerabilities-81501313.html
Chromereleases 110 vom 2023-02-07
https://chromereleases.googleblog.com/2023/02/stable-channel-update-for-desktop.html
Release notes for Microsoft Edge Security Updates vom 2023-02-07
https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security
Debian Security Advisory DSA-5345 vom 2023-02-08
https://lists.debian.org/debian-security-announce/2023/msg00034.html
Release notes for Microsoft Edge Security Updates
https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security
Ubuntu Security Notice USN-5881-1 vom 2023-02-21
https://ubuntu.com/security/notices/USN-5881-1