High WID-SEC-2023-1325 13 CVEs

Google Chrome: Mehrere Schwachstellen

Published May 30, 2023 · Updated Jan 31, 2024 · Revision 4 · de-DE

Vendor: Fedora Vendor: gentoo Vendor: Google Product: Chrome Product: Chrome < 114.0.5735.90 Linux Product: Chrome < 114.0.5735.90 Mac Product: Chrome < 114.0.5735.90/91 Windows Product: Linux Product: Linux Platform: Linux Platform: macOS Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Chrome ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen und potenziell, um Code auszuführen.

Product

Chrome ist ein Internet-Browser von Google.

Vulnerabilities 13

High 8.8

CVE-2023-2929

Out of bounds write in Swiftshader in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exp…

Google Chrome chromium Browsers Debian

May 30, 2023
High 8.8

CVE-2023-2930

Use after free in Extensions in Google Chrome prior to 114.0.5735.90 allowed an attacker who convinced a user to instal…

Google Chrome chromium qt5-qtwebengine Browsers Debian Alpine

May 30, 2023
High 8.8

CVE-2023-2931

Use after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap cor…

Google Chrome chromium qt5-qtwebengine Browsers Debian Alpine

May 30, 2023
High 8.8

CVE-2023-2932

Use after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap cor…

Google Chrome chromium qt5-qtwebengine Browsers Debian Alpine

May 30, 2023
High 8.8

CVE-2023-2933

Use after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap cor…

Google Chrome chromium qt5-qtwebengine Browsers Debian Alpine

May 30, 2023
High 8.8

CVE-2023-2934

Out of bounds memory access in Mojo in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially ex…

Google Chrome chromium Browsers Debian

May 30, 2023
High 8.8

CVE-2023-2935 EPSS 24%

Type Confusion in V8 in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corr…

Google Chrome chromium qt5-qtwebengine Browsers Debian Alpine

May 30, 2023
High 8.8

CVE-2023-2936 EPSS 23%

Type Confusion in V8 in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corr…

Google Chrome chromium Browsers Debian

May 30, 2023
High 7.8

CVE-2023-2939

Insufficient data validation in Installer in Google Chrome on Windows prior to 114.0.5735.90 allowed a local attacker t…

Google Chrome chromium Browsers Debian

May 30, 2023
Medium 6.5

CVE-2023-2940

Inappropriate implementation in Downloads in Google Chrome prior to 114.0.5735.90 allowed an attacker who convinced a u…

Google Chrome chromium Browsers Debian

May 30, 2023
Medium 4.3

CVE-2023-2937

Inappropriate implementation in Picture In Picture in Google Chrome prior to 114.0.5735.90 allowed a remote attacker wh…

Google Chrome chromium Browsers Debian

May 30, 2023
Medium 4.3

CVE-2023-2938

Inappropriate implementation in Picture In Picture in Google Chrome prior to 114.0.5735.90 allowed a remote attacker wh…

Google Chrome chromium Browsers Debian

May 30, 2023
Medium 4.3

CVE-2023-2941

Inappropriate implementation in Extensions API in Google Chrome prior to 114.0.5735.90 allowed an attacker who convince…

Google Chrome chromium Browsers Debian

May 30, 2023

Revision history

2024-01-31 #4
Neue Updates von Gentoo aufgenommen
2023-11-26 #3
Neue Updates von Gentoo aufgenommen
2023-08-01 #2
Neue Updates von Fedora aufgenommen
2023-05-30 #1
Initiale Fassung

References

Google Chrome Update for Desktop vom 2023-05-30
http://chromereleases.googleblog.com/2023/05/stable-channel-update-for-desktop_30.html
Fedora Security Advisory FEDORA-2023-95D73A5F50 vom 2023-08-01
https://bodhi.fedoraproject.org/updates/FEDORA-2023-95d73a5f50
Fedora Security Advisory FEDORA-EPEL-2023-CE780297C4 vom 2023-08-01
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-35315f9dc7
Fedora Security Advisory FEDORA-EPEL-2023-F173CDF0C6 vom 2023-08-01
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-f173cdf0c6
Fedora Security Advisory FEDORA-EPEL-2023-FD3407699E vom 2023-08-01
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-fd3407699e
Fedora Security Advisory FEDORA-2023-8A94349E38 vom 2023-08-01
https://bodhi.fedoraproject.org/updates/FEDORA-2023-8a94349e38
Gentoo Linux Security Advisory GLSA-202311-11 vom 2023-11-25
https://security.gentoo.org/glsa/202311-11
Gentoo Linux Security Advisory GLSA-202401-34 vom 2024-01-31
https://security.gentoo.org/glsa/202401-34