Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Chrome und Microsoft Edge ausnutzen, um vertrauliche Informationen offenzulegen, Sicherheitsmechanismen zu umgehen, den Benutzer zu täuschen und nicht näher beschriebene Auswirkungen zu erzielen.
Product
Chrome ist ein Internet-Browser von Google.
Edge ist ein Web Browser von Microsoft.
Vulnerabilities 26
-
High 8.8
Use after free in Swiftshader in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit …
-
High 8.8
Type confusion in V8 in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corr…
-
High 8.8
Type confusion in CSS in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap cor…
-
High 8.8
Use after free in DevTools in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had convienced the use…
-
High 8.8
Use after free in WebRTC in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap …
-
High 8.8
Heap buffer overflow in Metrics in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had compromised t…
-
High 8.8
Heap buffer overflow in UMA in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had compromised the r…
-
High 8.8
Heap buffer overflow in Web Audio API in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially …
-
High 8.8
Use after free in Core in Google Chrome on Lacros prior to 111.0.5563.64 allowed a remote attacker who convinced a user…
-
High 8.8
Insufficient policy enforcement in Intents in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker…
-
High 8.2CVE-2023-24892 Public exploit
Microsoft Edge (Chromium-based) Webview2 Spoofing Vulnerability
Microsoft Edge (Chromium-based) Webview2 Spoofing Vulnerability
-
Unscored —
Stack buffer overflow in Crash reporting in Google Chrome on Windows prior to 111.0.5563.64 allowed a remote attacker w…
-
Unscored —
Insufficient policy enforcement in Extensions API in Google Chrome prior to 111.0.5563.64 allowed an attacker who convi…
-
Unscored —
Insufficient policy enforcement in Autofill in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacke…
-
Unscored —
Insufficient policy enforcement in Web Payments API in Google Chrome prior to 111.0.5563.64 allowed a remote attacker t…
-
Unscored —
Insufficient policy enforcement in Navigation in Google Chrome on iOS prior to 111.0.5563.64 allowed a remote attacker …
-
Unscored —
Insufficient policy enforcement in Web Payments API in Google Chrome prior to 111.0.5563.64 allowed a remote attacker t…
-
Unscored —
Inappropriate implementation in Permission prompts in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to…
-
Unscored —
Inappropriate implementation in WebApp Installs in Google Chrome on Android prior to 111.0.5563.64 allowed an attacker …
-
Unscored —
Inappropriate implementation in Autofill in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker t…
-
Unscored —
Insufficient policy enforcement in Resource Timing in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to…
-
Unscored —
Insufficient policy enforcement in Resource Timing in Google Chrome prior to 111.0.5563.64 allowed an attacker who conv…
-
Unscored —
Inappropriate implementation in Intents in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to…
-
Unscored —
Type confusion in DevTools in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had compromised the re…
-
Unscored —
Inappropriate implementation in Internals in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to spoof th…
-
Unscored —
Insufficient data validation in DevTools in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to bypass na…
Revision history
-
#6
CVE's ergänzt
-
#5
CVE ergänzt
-
#4
Neue Updates aufgenommen
-
#3
Neue Updates von Debian und Fedora aufgenommen
-
#2
Neue Updates von Fedora aufgenommen
-
#1
Initiale Fassung
References
-
Ubuntu Security Notice USN-5949-1 vom 2023-03-13
https://ubuntu.com/security/notices/USN-5949-1
-
Release notes for Microsoft Edge Security Updates
https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security#march-13-2023
-
Fedora Security Advisory FEDORA-2023-015E4D696D vom 2023-03-10
https://bodhi.fedoraproject.org/updates/FEDORA-2023-015e4d696d
-
Debian Security Advisory DSA-5371 vom 2023-03-09
https://lists.debian.org/debian-security-announce/2023/msg00060.html
-
Fedora Security Advisory FEDORA-2023-06E40BCAE5 vom 2023-03-09
https://bodhi.fedoraproject.org/updates/FEDORA-2023-06e40bcae5
-
Release notes for Microsoft Edge Security Updates vom 2023-03-08
https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security
-
Chrome Stable Channel Update for Desktop vom 2023-03-07
http://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html