Medium WID-SEC-2023-1786 11 CVEs

Google Chrome: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff

Published Jul 18, 2023 · Updated Jan 31, 2024 · Revision 3 · de-DE

Vendor: Debian Vendor: gentoo Vendor: Google Product: Chrome Product: Chrome Linux < 115.0.5790.98 Product: Chrome Mac < 115.0.5790.98 Product: Chrome Windows < 115.0.5790.98 Product: Chrome Windows < 115.0.5790.99 Product: Linux Product: Linux Platform: Linux Platform: macOS Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Chrome ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.

Product

Chrome ist ein Internet-Browser von Google.

Vulnerabilities 11

Medium 4.3

CVE-2023-3735

Inappropriate implementation in Web API Permission Prompts in Google Chrome prior to 115.0.5790.98 allowed a remote att…

Google Chrome chromium Browsers Debian

Aug 1, 2023
Unscored —

CVE-2023-3727

Use after free in WebRTC in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to potentially exploit heap …

Google Chrome chromium Browsers Debian

Aug 1, 2023
Unscored —

CVE-2023-3728

Use after free in WebRTC in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to potentially exploit heap …

Google Chrome chromium Browsers Debian

Aug 1, 2023
Unscored —

CVE-2023-3730

Use after free in Tab Groups in Google Chrome prior to 115.0.5790.98 allowed a remote attacker who convinced a user to …

Google Chrome chromium Browsers Debian

Aug 1, 2023
Unscored —

CVE-2023-3732

Out of bounds memory access in Mojo in Google Chrome prior to 115.0.5790.98 allowed a remote attacker who had compromis…

Google Chrome chromium Browsers Debian

Aug 1, 2023
Unscored —

CVE-2023-3733

Inappropriate implementation in WebApp Installs in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to po…

Google Chrome chromium Browsers Debian

Aug 1, 2023
Unscored —

CVE-2023-3734

Inappropriate implementation in Picture In Picture in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to…

Google Chrome chromium Browsers Debian

Aug 1, 2023
Unscored —

CVE-2023-3736

Inappropriate implementation in Custom Tabs in Google Chrome on Android prior to 115.0.5790.98 allowed a remote attacke…

Google Chrome chromium Browsers Debian

Aug 1, 2023
Unscored —

CVE-2023-3737

Inappropriate implementation in Notifications in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to spoo…

Google Chrome chromium Browsers Debian

Aug 1, 2023
Unscored —

CVE-2023-3738

Inappropriate implementation in Autofill in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to obfuscate…

Google Chrome chromium Browsers Debian

Aug 1, 2023
Unscored —

CVE-2023-3740

Insufficient validation of untrusted input in Themes in Google Chrome prior to 115.0.5790.98 allowed a remote attacker …

Google Chrome chromium Browsers Debian

Aug 1, 2023

Revision history

2024-01-31 #3
Neue Updates von Gentoo aufgenommen
2023-07-20 #2
Neue Updates von Debian aufgenommen
2023-07-18 #1
Initiale Fassung

References

Chromereleases 115.0.5790.98 vom 2023-07-18
http://chromereleases.googleblog.com/2023/07/stable-channel-update-for-desktop.html
Debian Security Advisory DSA-5456 vom 2023-07-20
https://lists.debian.org/debian-security-announce/2023/msg00148.html
Gentoo Linux Security Advisory GLSA-202401-34 vom 2024-01-31
https://security.gentoo.org/glsa/202401-34