High WID-SEC-2023-0859 14 CVEs

Google Chrome und Microsoft Edge: Mehrere Schwachstellen

Published Apr 4, 2023 · Updated Oct 1, 2023 · Revision 6 · de-DE

Vendor: Debian Vendor: Fedora Vendor: gentoo Vendor: Google Vendor: Microsoft Vendor: Ubuntu Product: Chrome Product: Chrome Linux < 112.0.5615.49 Product: Chrome Mac < 112.0.5615.49 Product: Chrome Windows < 112.0.5615.49 Product: Chrome Windows < 112.0.5615.50 Product: Edge < 112.0.1722.34 Product: Linux Product: Linux Product: Linux Product: Linux Platform: Linux Platform: macOS Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Chrome und Microsoft Edge ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen, Sicherheitsmaßnahmen zu umgehen und Informationen falsch darzustellen.

Product

Chrome ist ein Internet-Browser von Google.
Edge ist ein Web Browser von Microsoft.

Vulnerabilities 14

High 8.8

CVE-2023-1810

Heap buffer overflow in Visuals in Google Chrome prior to 112.0.5615.49 allowed a remote attacker who had compromised t…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine

Apr 4, 2023
High 8.8

CVE-2023-1811

Use after free in Frames in Google Chrome prior to 112.0.5615.49 allowed a remote attacker who convinced a user to enga…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine

Apr 4, 2023
High 8.8

CVE-2023-1812

Out of bounds memory access in DOM Bindings in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to perfor…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Apr 4, 2023
High 8.8

CVE-2023-1815

Use after free in Networking APIs in Google Chrome prior to 112.0.5615.49 allowed a remote attacker who convinced a use…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Apr 4, 2023
High 8.8

CVE-2023-1818

Use after free in Vulkan in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to potentially exploit heap …

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Apr 4, 2023
High 8.8

CVE-2023-1820

Heap buffer overflow in Browser History in Google Chrome prior to 112.0.5615.49 allowed a remote attacker who convinced…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Apr 4, 2023
Unscored —

CVE-2023-1813

Inappropriate implementation in Extensions in Google Chrome prior to 112.0.5615.49 allowed an attacker who convinced a …

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Apr 4, 2023
Unscored —

CVE-2023-1814

Insufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 112.0.5615.49 allowed a remote at…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Apr 4, 2023
Unscored —

CVE-2023-1816

Incorrect security UI in Picture In Picture in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to potent…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Apr 4, 2023
Unscored —

CVE-2023-1817

Insufficient policy enforcement in Intents in Google Chrome on Android prior to 112.0.5615.49 allowed a remote attacker…

Google Chrome chromium Browsers Debian

Apr 4, 2023
Unscored —

CVE-2023-1819

Out of bounds read in Accessibility in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to perform an out…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Apr 4, 2023
Unscored —

CVE-2023-1821

Inappropriate implementation in WebShare in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to potential…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Apr 4, 2023
Unscored —

CVE-2023-1822

Incorrect security UI in Navigation in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to perform domain…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Apr 4, 2023
Unscored —

CVE-2023-1823

Inappropriate implementation in FedCM in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to bypass navig…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Apr 4, 2023

Revision history

2023-10-01 #6
Neue Updates von Gentoo aufgenommen
2023-04-16 #5
Neue Updates von Ubuntu aufgenommen
2023-04-12 #4
Neue Updates von Debian aufgenommen
2023-04-11 #3
Neue Updates von Fedora aufgenommen
2023-04-10 #2
Neue Updates von Microsoft aufgenommen
2023-04-04 #1
Initiale Fassung

References

Gentoo Linux Security Advisory GLSA-202309-17 vom 2023-09-30
https://security.gentoo.org/glsa/202309-17
Ubuntu Security Notice USN-6021-1 vom 2023-04-14
https://ubuntu.com/security/notices/USN-6021-1
Debian Security Advisory DSA-5386 vom 2023-04-12
https://lists.debian.org/debian-security-announce/2023/msg00076.html
Fedora Security Advisory FEDORA-EPEL-2023-8C1DF52E87 vom 2023-04-12
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-8c1df52e87
Fedora Security Advisory FEDORA-2023-78E350CB88 vom 2023-04-08
https://bodhi.fedoraproject.org/updates/FEDORA-2023-78e350cb88
Fedora Security Advisory FEDORA-2023-C93631749B vom 2023-04-08
https://bodhi.fedoraproject.org/updates/FEDORA-2023-c93631749b
Fedora Security Advisory FEDORA-2023-F07892DD59 vom 2023-04-08
https://bodhi.fedoraproject.org/updates/FEDORA-2023-f07892dd59
Fedora Security Advisory FEDORA-EPEL-2023-4821639CB4 vom 2023-04-10
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-4821639cb4
Fedora Security Advisory FEDORA-EPEL-2023-7573786F98 vom 2023-04-10
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-7573786f98
Release notes for Microsoft Edge Security Updates vom 2023-04-07
https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security
Release notes for Microsoft Edge Security Updates vom 2023-04-04
https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security
ble Channel Update for Desktop vom 2023-04-04
https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop.html