Google Chrome und Microsoft Edge: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff

Summary

Product

Vulnerabilities 8

• High 8.8
  CVE-2023-0927

  Use after free in Web Payments API in Google Chrome on Android prior to 110.0.5481.177 allowed a remote attacker who ha…

  Google Chrome chromium Browsers Debian
  Feb 22, 2023
• High 8.8
  CVE-2023-0928

  Use after free in SwiftShader in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Feb 22, 2023
• High 8.8
  CVE-2023-0929

  Use after free in Vulkan in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Feb 22, 2023
• High 8.8
  CVE-2023-0930

  Heap buffer overflow in Video in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Feb 22, 2023
• High 8.8
  CVE-2023-0931

  Use after free in Video in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap …

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine
  Feb 22, 2023
• High 8.8
  CVE-2023-0932

  Use after free in WebRTC in Google Chrome on Windows prior to 110.0.5481.177 allowed a remote attacker who convinced th…

  Google Chrome chromium Browsers Debian
  Feb 22, 2023
• High 8.8
  CVE-2023-0933

  Integer overflow in PDF in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap …

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine
  Feb 22, 2023
• High 8.8
  CVE-2023-0941

  Use after free in Prompts in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit hea…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Feb 22, 2023

Revision history

1. 2023-10-01 #9

   Neue Updates von Gentoo aufgenommen

2. 2023-03-22 #8

   Neue Updates von IGEL aufgenommen

3. 2023-03-13 #7

   Neue Updates von Ubuntu aufgenommen

4. 2023-03-09 #6

   Neue Updates von Fedora aufgenommen

5. 2023-03-08 #5

   Neue Updates von Fedora aufgenommen

6. 2023-02-27 #4

   anpassung Versionsnummer

7. 2023-02-26 #3

   Neue Updates von Microsoft aufgenommen

8. 2023-02-23 #2

   Neue Updates von Debian aufgenommen

9. 2023-02-22 #1

   Initiale Fassung

References

• Gentoo Linux Security Advisory GLSA-202309-17 vom 2023-09-30
  https://security.gentoo.org/glsa/202309-17
• IGEL Security Notice ISN-2023-03 vom 2023-03-22
  https://kb.igel.com/securitysafety/en/isn-2023-03-chromium-vulnerabilities-81501313.html
• Ubuntu Security Notice USN-5949-1 vom 2023-03-13
  https://ubuntu.com/security/notices/USN-5949-1
• Fedora Security Advisory FEDORA-EPEL-2023-A283F53190 vom 2023-03-10
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-a283f53190
• Fedora Security Advisory FEDORA-EPEL-2023-1DC713F355 vom 2023-03-10
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-1dc713f355
• Fedora Security Advisory FEDORA-EPEL-2023-7B23E5A4B3 vom 2023-03-09
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-7b23e5a4b3
• Fedora Security Advisory FEDORA-2023-1CF9C4477B vom 2023-03-09
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-1cf9c4477b
• Release notes for Microsoft Edge Security Updates vom 2023-02-25
  https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security
• Google Chrome Stable Channel Desktop Update vom 2023-02-22
  https://chromereleases.googleblog.com/2023/02/stable-channel-desktop-update_22.html
• Debian Security Advisory DSA-5359 vom 2023-02-23
  https://lists.debian.org/debian-security-announce/2023/msg00048.html