Google Chrome / Microsoft Edge: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 11

• High 8.8
  CVE-2023-4863 Exploited Public exploit EPSS 100%

  libwebp: OOB write in BuildHuffmanTable

  Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)

  Google Chrome libwebp chromium Browsers Debian Ubuntu Azure Linux Alpine Wolfi npm PyPI Go crates.io NuGet
  Sep 12, 2023

  KEV Sep 13, 2023
• Unscored —
  CVE-2023-4900

  Inappropriate implementation in Custom Tabs in Google Chrome on Android prior to 117.0.5938.62 allowed a remote attacke…

  Google Chrome chromium Browsers Debian
  Sep 12, 2023
• Unscored —
  CVE-2023-4901

  Inappropriate implementation in Prompts in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to potentiall…

  Google Chrome chromium Browsers Debian
  Sep 12, 2023
• Unscored —
  CVE-2023-4902

  Inappropriate implementation in Input in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to spoof securi…

  Google Chrome chromium Browsers Debian
  Sep 12, 2023
• Unscored —
  CVE-2023-4903

  Inappropriate implementation in Custom Mobile Tabs in Google Chrome on Android prior to 117.0.5938.62 allowed a remote …

  Google Chrome chromium Browsers Debian
  Sep 12, 2023
• Unscored —
  CVE-2023-4904

  Insufficient policy enforcement in Downloads in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to bypas…

  Google Chrome chromium Browsers Debian
  Sep 12, 2023
• Unscored —
  CVE-2023-4905

  Inappropriate implementation in Prompts in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to spoof secu…

  Google Chrome chromium Browsers Debian
  Sep 12, 2023
• Unscored —
  CVE-2023-4906

  Insufficient policy enforcement in Autofill in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to bypass…

  Google Chrome chromium Browsers Debian
  Sep 12, 2023
• Unscored —
  CVE-2023-4907

  Inappropriate implementation in Intents in Google Chrome on Android prior to 117.0.5938.62 allowed a remote attacker to…

  Google Chrome chromium Browsers Debian
  Sep 12, 2023
• Unscored —
  CVE-2023-4908

  Inappropriate implementation in Picture in Picture in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to…

  Google Chrome chromium Browsers Debian
  Sep 12, 2023
• Unscored —
  CVE-2023-4909

  Inappropriate implementation in Interstitials in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to obfu…

  Google Chrome chromium Browsers Debian
  Sep 12, 2023

Revision history

1. 2024-01-31 #7

   Neue Updates von Gentoo aufgenommen

2. 2023-10-01 #6

   Neue Updates von Fedora aufgenommen

3. 2023-09-24 #5

   Neue Updates von Fedora aufgenommen

4. 2023-09-18 #4

   Neue Updates von Fedora, Red Hat und Debian aufgenommen

5. 2023-09-17 #3

   Updates von Microsoft

6. 2023-09-13 #2

   Neue Updates von Fedora aufgenommen

7. 2023-09-12 #1

   Initiale Fassung

References

• Chrome Stable Channel Update for Desktop vom 2023-09-12
  https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_12.html
• Fedora Security Advisory FEDORA-2023-D5FAEDE1D6 vom 2023-09-13
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-d5faede1d6
• Fedora Security Advisory FEDORA-2023-509640A8A6 vom 2023-09-13
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-509640a8a6
• Fedora Security Advisory FEDORA-2023-3D1935DC6A vom 2023-09-13
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-3d1935dc6a
• Release notes for Microsoft Edge Security Updates vom 2023-09-17
  https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security#september-15-2023
• Fedora Security Advisory FEDORA-EPEL-2023-C66924CB92 vom 2023-09-17
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-c66924cb92
• Fedora Security Advisory FEDORA-2023-3BFB63F6D2 vom 2023-09-17
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-3bfb63f6d2
• Fedora Security Advisory FEDORA-2023-0DE0929147 vom 2023-09-17
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-0de0929147
• Fedora Security Advisory FEDORA-EPEL-2023-54433BC31F vom 2023-09-17
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-54433bc31f
• Debian Security Advisory DSA-5497 vom 2023-09-17
  https://lists.debian.org/debian-security-announce/2023/msg00191.html
• Fedora Security Advisory FEDORA-2023-D58A84DDA8 vom 2023-09-17
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-d58a84dda8
• Fedora Security Advisory FEDORA-EPEL-2023-EA08732E6A vom 2023-09-17
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-ea08732e6a
• Fedora Security Advisory FEDORA-2023-A33B8C01E7 vom 2023-09-18
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-a33b8c01e7
• Red Hat Security Advisory RHSA-2023:5191 vom 2023-09-18
  https://access.redhat.com/errata/RHSA-2023:5191
• Fedora Security Advisory FEDORA-2023-B427F54E68 vom 2023-09-18
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-b427f54e68
• Red Hat Security Advisory RHSA-2023:5204 vom 2023-09-18
  https://access.redhat.com/errata/RHSA-2023:5204
• Red Hat Security Advisory RHSA-2023:5190 vom 2023-09-18
  https://access.redhat.com/errata/RHSA-2023:5190
• Fedora Security Advisory FEDORA-EPEL-2023-79B0154754 vom 2023-09-18
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-79b0154754
• Fedora Security Advisory FEDORA-EPEL-2023-05DC047BF8 vom 2023-09-18
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-05dc047bf8
• Fedora Security Advisory FEDORA-EPEL-2023-0DF1F37A48 vom 2023-09-18
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-0df1f37a48
• Debian Security Advisory DLA-3570 vom 2023-09-18
  https://lists.debian.org/debian-lts-announce/2023/09/msg00017.html
• Debian Security Advisory DSA-5499 vom 2023-09-19
  https://lists.debian.org/debian-security-announce/2023/msg00192.html
• Red Hat Security Advisory RHSA-2023:5189 vom 2023-09-18
  https://access.redhat.com/errata/RHSA-2023:5189
• Fedora Security Advisory FEDORA-EPEL-2023-9ABC3565B5 vom 2023-09-24
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-9abc3565b5
• Fedora Security Advisory FEDORA-EPEL-2023-09CC239FE3 vom 2023-09-24
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-09cc239fe3
• Fedora Security Advisory FEDORA-EPEL-2023-981E9F53FF vom 2023-09-24
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-981e9f53ff
• Fedora Security Advisory FEDORA-2023-DA064561FA vom 2023-09-24
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-da064561fa
• Fedora Security Advisory FEDORA-2023-C890266D3F vom 2023-09-30
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-c890266d3f
• Fedora Security Advisory FEDORA-EPEL-2023-CCA1F87440 vom 2023-09-30
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-cca1f87440
• Fedora Security Advisory FEDORA-EPEL-2023-EDC9C74369 vom 2023-09-30
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-edc9c74369
• Fedora Security Advisory FEDORA-EPEL-2023-8F3E1B6F78 vom 2023-09-30
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-8f3e1b6f78
• Gentoo Linux Security Advisory GLSA-202401-34 vom 2024-01-31
  https://security.gentoo.org/glsa/202401-34