Medium WID-SEC-2023-1950 11 CVEs

Google Chrome: Mehrere Schwachstellen

Published Aug 2, 2023 · Updated Jan 31, 2024 · Revision 4 · de-DE

Vendor: Debian Vendor: gentoo Vendor: Google Product: Chrome Product: Chrome < 115.0.5790.170 Product: Chrome < 115.0.5790.171 Product: Linux Product: Linux Platform: Linux Platform: macOS Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Google Chrome ausnutzen, um einen Cross-Site-Script-Angriff auszuführen, beliebigen Code auszuführen und vertrauliche Informationen preiszugeben.

Product

Chrome ist ein Internet-Browser von Google.

Vulnerabilities 11

Unscored —

CVE-2023-4068 EPSS 16%

Type Confusion in V8 in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to perform arbitrary read/write…

Google Chrome chromium Browsers Debian

Aug 3, 2023
Unscored —

CVE-2023-4069 EPSS 25%

Type Confusion in V8 in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap cor…

Google Chrome chromium Browsers Debian

Aug 3, 2023
Unscored —

CVE-2023-4070

Type Confusion in V8 in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to perform arbitrary read/write…

Google Chrome chromium Browsers Debian

Aug 3, 2023
Unscored —

CVE-2023-4071

Heap buffer overflow in Visuals in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially explo…

Google Chrome chromium qt5-qtwebengine Browsers Debian Alpine

Aug 3, 2023
Unscored —

CVE-2023-4072

Out of bounds read and write in WebGL in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially…

Google Chrome chromium Browsers Debian

Aug 3, 2023
Unscored —

CVE-2023-4073

Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 115.0.5790.170 allowed a remote attacker to poten…

Google Chrome chromium Browsers Debian

Aug 3, 2023
Unscored —

CVE-2023-4074

Use after free in Blink Task Scheduling in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potential…

Google Chrome chromium qt5-qtwebengine Browsers Debian Alpine

Aug 3, 2023
Unscored —

CVE-2023-4075

Use after free in Cast in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap c…

Google Chrome chromium Browsers Debian

Aug 3, 2023
Unscored —

CVE-2023-4076

Use after free in WebRTC in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap…

Google Chrome chromium qt5-qtwebengine Browsers Debian Alpine

Aug 3, 2023
Unscored —

CVE-2023-4077

Insufficient data validation in Extensions in Google Chrome prior to 115.0.5790.170 allowed an attacker who convinced a…

Google Chrome chromium Browsers Debian

Aug 3, 2023
Unscored —

CVE-2023-4078

Inappropriate implementation in Extensions in Google Chrome prior to 115.0.5790.170 allowed an attacker who convinced a…

Google Chrome chromium Browsers Debian

Aug 3, 2023

Revision history

2024-01-31 #4
Neue Updates von Gentoo aufgenommen
2023-11-26 #3
Neue Updates von Gentoo aufgenommen
2023-08-06 #2
Neue Updates von Debian aufgenommen
2023-08-02 #1
Initiale Fassung

References

Google Chrome Security Releases vom 2023-08-02
http://chromereleases.googleblog.com/2023/08/stable-channel-update-for-desktop.html
Debian Security Advisory DSA-5467 vom 2023-08-04
https://lists.debian.org/debian-security-announce/2023/msg00159.html
Gentoo Linux Security Advisory GLSA-202311-11 vom 2023-11-25
https://security.gentoo.org/glsa/202311-11
Gentoo Linux Security Advisory GLSA-202401-34 vom 2024-01-31
https://security.gentoo.org/glsa/202401-34