High WID-SEC-2023-0715 7 CVEs

Google Chrome und Microsoft Edge: Mehrere Schwachstellen

Published Mar 21, 2023 · Updated Oct 1, 2023 · Revision 9 · de-DE

Vendor: Debian Vendor: Fedora Vendor: gentoo Vendor: Google Vendor: Microsoft Vendor: Ubuntu Product: Chrome < 111.0.5563.110 Product: Edge Product: Edge < 111.0.1661.54 Product: Linux Product: Linux Product: Linux Product: Linux Platform: Linux Platform: macOS Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Chrome und Microsoft Edge ausnutzen, um beliebigen Programmcode auszuführen oder Informationen offenzulegen.

Product

Chrome ist ein Internet-Browser von Google.
Edge ist ein Internet-Browser von Microsoft

Vulnerabilities 7

Critical 9.8

CVE-2023-1529

Out of bounds memory access in WebHID in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine

Mar 21, 2023
High 8.8

CVE-2023-1528

Use after free in Passwords in Google Chrome prior to 111.0.5563.110 allowed a remote attacker who had compromised the …

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Mar 21, 2023
High 8.8

CVE-2023-1530

Use after free in PDF in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploit heap co…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine

Mar 21, 2023
High 8.8

CVE-2023-1531

Use after free in ANGLE in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploit heap …

Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine

Mar 21, 2023
High 8.8

CVE-2023-1532

Out of bounds read in GPU Video in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially explo…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Mar 21, 2023
High 8.8

CVE-2023-1533

Use after free in WebProtect in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploit …

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Mar 21, 2023
High 8.8

CVE-2023-1534

Out of bounds read in ANGLE in Google Chrome prior to 111.0.5563.110 allowed a remote attacker who had compromised the …

Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine

Mar 21, 2023

Revision history

2023-10-01 #9
Neue Updates von Gentoo aufgenommen
2023-04-23 #8
Neue Updates von Fedora aufgenommen
2023-04-19 #7
Neue Updates von Fedora aufgenommen
2023-04-16 #6
Neue Updates von Ubuntu aufgenommen
2023-04-10 #5
Neue Updates von Fedora aufgenommen
2023-03-30 #4
Neue Updates von Fedora aufgenommen
2023-03-26 #3
Neue Updates aufgenommen
2023-03-23 #2
Neue Updates von Debian aufgenommen
2023-03-21 #1
Initiale Fassung

References

Gentoo Linux Security Advisory GLSA-202309-17 vom 2023-09-30
https://security.gentoo.org/glsa/202309-17
Fedora Security Advisory FEDORA-EPEL-2023-221F366ACA vom 2023-04-23
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-221f366aca
Fedora Security Advisory FEDORA-EPEL-2023-9631F50ABC vom 2023-04-19
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-9631f50abc
Ubuntu Security Notice USN-6021-1 vom 2023-04-14
https://ubuntu.com/security/notices/USN-6021-1
Fedora Security Advisory FEDORA-2023-78E350CB88 vom 2023-04-08
https://bodhi.fedoraproject.org/updates/FEDORA-2023-78e350cb88
Fedora Security Advisory FEDORA-2023-C93631749B vom 2023-04-08
https://bodhi.fedoraproject.org/updates/FEDORA-2023-c93631749b
Fedora Security Advisory FEDORA-2023-F07892DD59 vom 2023-04-08
https://bodhi.fedoraproject.org/updates/FEDORA-2023-f07892dd59
Fedora Security Advisory FEDORA-EPEL-2023-4821639CB4 vom 2023-04-10
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-4821639cb4
Fedora Security Advisory FEDORA-EPEL-2023-7573786F98 vom 2023-04-10
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-7573786f98
Fedora Security Advisory FEDORA-EPEL-2023-E0EC985DF4 vom 2023-03-31
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-e0ec985df4
Fedora Security Advisory FEDORA-2023-D6E0EE0741 vom 2023-03-31
https://bodhi.fedoraproject.org/updates/FEDORA-2023-d6e0ee0741
Release notes for Microsoft Edge Security Updates
https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security#march-24-2023
Fedora Security Advisory FEDORA-2023-AFB29B2FCE vom 2023-03-24
https://bodhi.fedoraproject.org/updates/FEDORA-2023-afb29b2fce
Fedora Security Advisory FEDORA-EPEL-2023-7B4CF5B91E vom 2023-03-24
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-7b4cf5b91e
Fedora Security Advisory FEDORA-EPEL-2023-768E906DB7 vom 2023-03-24
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-768e906db7
Fedora Security Advisory FEDORA-2023-3003165311 vom 2023-03-24
https://bodhi.fedoraproject.org/updates/FEDORA-2023-3003165311
Fedora Security Advisory FEDORA-2023-0E77B3D321 vom 2023-03-24
https://bodhi.fedoraproject.org/updates/FEDORA-2023-0e77b3d321
Debian Security Advisory DSA-5377 vom 2023-03-23
https://lists.debian.org/debian-security-announce/2023/msg00067.html
Release notes for Microsoft Edge Security Updates
https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security#march-21-2023
Github Security Advisory vom 2023-03-21
https://github.com/advisories/GHSA-6qh2-62r9-72q3
Github Security Advisory vom 2023-03-21
https://github.com/advisories/GHSA-wpm2-8r6c-w3c6
Github Security Advisory vom 2023-03-21
https://github.com/advisories/GHSA-w595-39vq-9849
Github Security Advisory vom 2023-03-21
https://github.com/advisories/GHSA-7vp7-5qgg-v73x
Github Security Advisory vom 2023-03-21
https://github.com/advisories/GHSA-rcgr-qvjp-p7c5
Github Security Advisory vom 2023-03-21
https://github.com/advisories/GHSA-64mf-xhgv-qwph
Github Security Advisory vom 2023-03-21
https://github.com/advisories/GHSA-c2w4-xgq6-w9xw
Chromereleases 111.0.5563.110 vom 2023-03-21
https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop_21.html