Google Chrome & Microsoft Edge: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 21

• High 8.8
  CVE-2023-4352

  Type confusion in V8 in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially exploit heap corr…

  Google Chrome chromium Browsers Debian
  Aug 15, 2023
• High 8.8
  CVE-2023-4353

  Heap buffer overflow in ANGLE in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially exploit …

  Google Chrome chromium Browsers Debian
  Aug 15, 2023
• High 8.8
  CVE-2023-4354

  Heap buffer overflow in Skia in Google Chrome prior to 116.0.5845.96 allowed a remote attacker who had compromised the …

  Google Chrome chromium qt5-qtwebengine Browsers Debian Alpine
  Aug 15, 2023
• High 8.8
  CVE-2023-4355 EPSS 28%

  Out of bounds memory access in V8 in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially expl…

  Google Chrome chromium Browsers Debian
  Aug 15, 2023
• High 8.8
  CVE-2023-4357 Public exploit EPSS 47%

  Insufficient validation of untrusted input in XML in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to …

  Google Chrome chromium Browsers Debian
  Aug 15, 2023
• High 8.8
  CVE-2023-4358

  Use after free in DNS in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially exploit heap cor…

  Google Chrome chromium Browsers Debian
  Aug 15, 2023
• Unscored —
  CVE-2023-2312

  Use after free in Offline in Google Chrome on Android prior to 116.0.5845.96 allowed a remote attacker who had compromi…

  Google Chrome chromium Browsers Debian
  Aug 15, 2023
• Unscored —
  CVE-2023-4349

  Use after free in Device Trust Connectors in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentia…

  Google Chrome chromium Browsers Debian
  Aug 15, 2023
• Unscored —
  CVE-2023-4350

  Inappropriate implementation in Fullscreen in Google Chrome on Android prior to 116.0.5845.96 allowed a remote attacker…

  Google Chrome chromium Browsers Debian
  Aug 15, 2023
• Unscored —
  CVE-2023-4351

  Use after free in Network in Google Chrome prior to 116.0.5845.96 allowed a remote attacker who has elicited a browser …

  Google Chrome chromium qt5-qtwebengine Browsers Debian Alpine
  Aug 15, 2023
• Unscored —
  CVE-2023-4356

  Use after free in Audio in Google Chrome prior to 116.0.5845.96 allowed a remote attacker who has convinced a user to e…

  Google Chrome chromium Browsers Debian
  Aug 15, 2023
• Unscored —
  CVE-2023-4359

  Inappropriate implementation in App Launcher in Google Chrome on iOS prior to 116.0.5845.96 allowed a remote attacker t…

  Google Chrome chromium Browsers Debian
  Aug 15, 2023
• Unscored —
  CVE-2023-4360

  Inappropriate implementation in Color in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to obfuscate se…

  Google Chrome chromium Browsers Debian
  Aug 15, 2023
• Unscored —
  CVE-2023-4361

  Inappropriate implementation in Autofill in Google Chrome on Android prior to 116.0.5845.96 allowed a remote attacker t…

  Google Chrome chromium Browsers Debian
  Aug 15, 2023
• Unscored —
  CVE-2023-4362 EPSS 19%

  Heap buffer overflow in Mojom IDL in Google Chrome prior to 116.0.5845.96 allowed a remote attacker who had compromised…

  Google Chrome chromium qt5-qtwebengine Browsers Debian Alpine
  Aug 15, 2023
• Unscored —
  CVE-2023-4363

  Inappropriate implementation in WebShare in Google Chrome on Android prior to 116.0.5845.96 allowed a remote attacker t…

  Google Chrome chromium Browsers Debian
  Aug 15, 2023
• Unscored —
  CVE-2023-4364

  Inappropriate implementation in Permission Prompts in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to…

  Google Chrome chromium Browsers Debian
  Aug 15, 2023
• Unscored —
  CVE-2023-4365

  Inappropriate implementation in Fullscreen in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to obfusca…

  Google Chrome chromium Browsers Debian
  Aug 15, 2023
• Unscored —
  CVE-2023-4366

  Use after free in Extensions in Google Chrome prior to 116.0.5845.96 allowed an attacker who convinced a user to instal…

  Google Chrome chromium Browsers Debian
  Aug 15, 2023
• Unscored —
  CVE-2023-4367

  Insufficient policy enforcement in Extensions API in Google Chrome prior to 116.0.5845.96 allowed an attacker who convi…

  Google Chrome chromium Browsers Debian
  Aug 15, 2023
• Unscored —
  CVE-2023-4368

  Insufficient policy enforcement in Extensions API in Google Chrome prior to 116.0.5845.96 allowed an attacker who convi…

  Google Chrome chromium Browsers Debian
  Aug 15, 2023

Revision history

1. 2024-01-31 #5

   Neue Updates von Gentoo aufgenommen

2. 2023-08-21 #4

   Neue Updates aufgenommen

3. 2023-08-20 #3

   Neue Updates von Fedora aufgenommen

4. 2023-08-17 #2

   Neue Updates von Debian aufgenommen

5. 2023-08-15 #1

   Initiale Fassung

References

• Google Chrome Security Releases vom 2023-08-15
  https://chromereleases.googleblog.com/2023/08/stable-channel-update-for-desktop_15.html
• Microsoft Edge Security Updates vom 2023-08-16
  https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security
• Debian Security Advisory DSA-5479 vom 2023-08-17
  https://lists.debian.org/debian-security-announce/2023/msg00171.html
• Fedora Security Advisory FEDORA-2023-F8E94641DC vom 2023-08-18
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-f8e94641dc
• Fedora Security Advisory FEDORA-2023-5416CD3040 vom 2023-08-18
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-5416cd3040
• Fedora Security Advisory FEDORA-EPEL-2023-F08C8F0812 vom 2023-08-18
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-f08c8f0812
• Fedora Security Advisory FEDORA-EPEL-2023-254992A2EF vom 2023-08-18
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-254992a2ef
• Fedora Security Advisory FEDORA-EPEL-2023-DB0EAC64FB vom 2023-08-18
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-db0eac64fb
• Release notes for Microsoft Edge Security Updates vom 2023-08-21
  https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security
• Gentoo Linux Security Advisory GLSA-202401-34 vom 2024-01-31
  https://security.gentoo.org/glsa/202401-34