High WID-SEC-2023-1232 6 CVEs

Google Chrome: Mehrere Schwachstellen

Published May 16, 2023 · Updated Nov 26, 2023 · Revision 6 · de-DE

Vendor: Debian Vendor: Fedora Vendor: gentoo Vendor: Google Vendor: IGEL Vendor: Microsoft Product: Chrome Product: Chrome < 113.0.5672.126 Linux Product: Chrome < 113.0.5672.126 Mac Product: Chrome < 113.0.5672.126/.127 Windows Product: Edge < 113.0.1774.50 Product: Linux Product: Linux Product: Linux Product: OS Platform: Linux Platform: macOS Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Chrome und Microsoft Edge ausnutzen, um beliebigen Programmcode auszuführen und andere nicht näher spezifizierte Auswirkungen zu erreichen.

Product

Chrome ist ein Internet-Browser von Google.
Edge ist ein Web Browser von Microsoft.

Vulnerabilities 6

High 8.8

CVE-2023-2721

Use after free in Navigation in Google Chrome prior to 113.0.5672.126 allowed a remote attacker to potentially exploit …

Google Chrome chromium qt5-qtwebengine Browsers Debian Alpine

May 16, 2023
High 8.8

CVE-2023-2722

Use after free in Autofill UI in Google Chrome on Android prior to 113.0.5672.126 allowed a remote attacker to potentia…

Google Chrome chromium Browsers Debian

May 16, 2023
High 8.8

CVE-2023-2723 EPSS 15%

Use after free in DevTools in Google Chrome prior to 113.0.5672.126 allowed a remote attacker who had compromised the r…

Google Chrome chromium Browsers Debian

May 16, 2023
High 8.8

CVE-2023-2724 EPSS 29%

Type confusion in V8 in Google Chrome prior to 113.0.5672.126 allowed a remote attacker to potentially exploit heap cor…

Google Chrome chromium Browsers Debian

May 16, 2023
High 8.8

CVE-2023-2725 EPSS 25%

Use after free in Guest View in Google Chrome prior to 113.0.5672.126 allowed an attacker who convinced a user to insta…

Google Chrome chromium Browsers Debian

May 16, 2023
High 8.8

CVE-2023-2726

Inappropriate implementation in WebApp Installs in Google Chrome prior to 113.0.5672.126 allowed an attacker who convin…

Google Chrome chromium Browsers Debian

May 16, 2023

Revision history

2023-11-26 #6
Neue Updates von Gentoo aufgenommen
2023-10-01 #5
Neue Updates von Gentoo aufgenommen
2023-05-25 #4
Neue Updates von IGEL aufgenommen
2023-05-21 #3
Neue Updates von Fedora aufgenommen
2023-05-18 #2
Neue Updates von Microsoft aufgenommen
2023-05-16 #1
Initiale Fassung

References

Gentoo Linux Security Advisory GLSA-202311-11 vom 2023-11-25
https://security.gentoo.org/glsa/202311-11
Gentoo Linux Security Advisory GLSA-202309-17 vom 2023-09-30
https://security.gentoo.org/glsa/202309-17
IGEL Security Notice ISN-2023-08 vom 2023-05-25
https://kb.igel.com/securitysafety/en/isn-2023-08-chromium-critical-vulnerability-88026345.html
Fedora Security Advisory FEDORA-EPEL-2023-1388277BF4 vom 2023-05-20
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-1388277bf4
Fedora Security Advisory FEDORA-EPEL-2023-6FBA4B91E0 vom 2023-05-20
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-6fba4b91e0
Fedora Security Advisory FEDORA-2023-69264C19F9 vom 2023-05-20
https://bodhi.fedoraproject.org/updates/FEDORA-2023-69264c19f9
Fedora Security Advisory FEDORA-2023-5C477A04CA vom 2023-05-20
https://bodhi.fedoraproject.org/updates/FEDORA-2023-5c477a04ca
Fedora Security Advisory FEDORA-EPEL-2023-2694488870 vom 2023-05-20
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-2694488870
Debian Security Advisory DSA-5404 vom 2023-05-18
https://www.debian.org/security/2023/dsa-5404
Release notes for Microsoft Edge Security Updates vom 2023-05-16
https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security
Google Chrome Stable Channel Update for Desktop vom 2023-05-16
https://chromereleases.googleblog.com/2023/05/stable-channel-update-for-desktop_16.html