High WID-SEC-2023-1452 4 CVEs

Google Chrome und Microsoft Edge: Mehrere Schwachstellen

Published Jun 13, 2023 · Updated Jan 31, 2024 · Revision 5 · de-DE

Vendor: Debian Vendor: Fedora Vendor: gentoo Vendor: Google Vendor: Microsoft Product: Chrome Product: Chrome linux < 114.0.5735.133 Product: Chrome mac < 114.0.5735.133 Product: Chrome windows < 114.0.5735.133/134 Product: Edge Product: Edge < 114.0.1823.51 Product: Linux Product: Linux Product: Linux Platform: Linux Platform: macOS Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Chrome und Microsoft Edge ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen und potenziell, um Code auszuführen.

Product

Chrome ist ein Internet-Browser von Google.
Edge ist ein Web Browser von Microsoft.

Vulnerabilities 4

High 8.8

CVE-2023-3214

Use after free in Autofill payments in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially e…

Google Chrome chromium Browsers Debian

Jun 13, 2023
High 8.8

CVE-2023-3215 EPSS 14%

Use after free in WebRTC in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap…

Google Chrome chromium Browsers Debian

Jun 13, 2023
High 8.8

CVE-2023-3216

Type confusion in V8 in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap cor…

Google Chrome chromium qt5-qtwebengine Browsers Debian Alpine

Jun 13, 2023
High 8.8

CVE-2023-3217 EPSS 13%

Use after free in WebXR in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap …

Google Chrome chromium Browsers Debian

Jun 13, 2023

Revision history

2024-01-31 #5
Neue Updates von Gentoo aufgenommen
2023-11-26 #4
Neue Updates von Gentoo aufgenommen
2023-06-18 #3
Neue Updates von Fedora aufgenommen
2023-06-15 #2
Neue Updates von Debian aufgenommen
2023-06-13 #1
Initiale Fassung

References

Google Chrome Releases vom 2023-06-13
https://chromereleases.googleblog.com/2023/06/stable-channel-update-for-desktop_13.html
Release Notes für Microsoft Edge Security Updates
https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security#june-13-2023
Debian Security Advisory DSA-5428 vom 2023-06-15
https://lists.debian.org/debian-security-announce/2023/msg00119.html
Fedora Security Advisory FEDORA-2023-1B99669138 vom 2023-06-18
https://bodhi.fedoraproject.org/updates/FEDORA-2023-1b99669138
Release notes for Microsoft Edge Security Updates
https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security#june-15-2023
Fedora Security Advisory FEDORA-2023-5F35718D4C vom 2023-06-18
https://bodhi.fedoraproject.org/updates/FEDORA-2023-5f35718d4c
Fedora Security Advisory FEDORA-EPEL-2023-3947E434D2 vom 2023-06-18
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-3947e434d2
Fedora Security Advisory FEDORA-EPEL-2023-1FA35650E4 vom 2023-06-18
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-1fa35650e4
Fedora Security Advisory FEDORA-EPEL-2023-8F0F0D103A vom 2023-06-18
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-8f0f0d103a
Gentoo Linux Security Advisory GLSA-202311-11 vom 2023-11-25
https://security.gentoo.org/glsa/202311-11
Gentoo Linux Security Advisory GLSA-202401-34 vom 2024-01-31
https://security.gentoo.org/glsa/202401-34