Google Chrome / Microsoft Edge : Mehrere Schwachstellen ermöglichen Codeausführung

Summary

Product

Vulnerabilities 3

• High 8.8
  CVE-2023-5217 Exploited Public exploit EPSS 49%

  Electron affected by libvpx's heap buffer overflow in vp8 encoding

  Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  Google Chrome libvpx chromium Browsers Debian Ubuntu Alpine npm
  Sep 28, 2023

  KEV Oct 2, 2023
• Unscored —
  CVE-2023-5186

  Use after free in Passwords in Google Chrome prior to 117.0.5938.132 allowed a remote attacker who convinced a user to …

  Google Chrome chromium Browsers Debian
  Sep 28, 2023
• Unscored —
  CVE-2023-5187

  Use after free in Extensions in Google Chrome prior to 117.0.5938.132 allowed an attacker who convinced a user to insta…

  Google Chrome chromium Browsers Debian
  Sep 28, 2023

Revision history

1. 2025-01-14 #8

   Neue Updates von Fortinet aufgenommen

2. 2024-01-31 #7

   Neue Updates von Gentoo aufgenommen

3. 2023-10-23 #6

   Neue Updates von Ubuntu aufgenommen

4. 2023-10-15 #5

   Neue Updates von Red Hat aufgenommen

5. 2023-10-05 #4

   Neue Updates von IGEL aufgenommen

6. 2023-10-03 #3

   Neue Updates von Ubuntu aufgenommen

7. 2023-10-01 #2

   Neue Updates von Fedora und Debian aufgenommen

8. 2023-09-27 #1

   Initiale Fassung

References

• Google Chrome Stable Channel Update for Desktop vom 2023-09-27
  https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_27.html
• Fedora Security Advisory FEDORA-2023-D66A01AD4F vom 2023-09-30
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-d66a01ad4f
• Fedora Security Advisory FEDORA-EPEL-2023-8F3E1B6F78 vom 2023-09-30
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-8f3e1b6f78
• Debian Security Advisory DSA-5510 vom 2023-09-29
  https://lists.debian.org/debian-security-announce/2023/msg00203.html
• Debian Security Advisory DLA-3598 vom 2023-10-01
  https://lists.debian.org/debian-lts-announce/2023/10/msg00001.html
• Debian Security Advisory DSA-5508 vom 2023-09-29
  https://lists.debian.org/debian-security-announce/2023/msg00201.html
• Fedora Security Advisory FEDORA-2023-0CD03C3746 vom 2023-09-30
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-0cd03c3746
• Fedora Security Advisory FEDORA-2023-C890266D3F vom 2023-09-30
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-c890266d3f
• Debian Security Advisory DSA-5508 vom 2023-09-30
  https://www.debian.org/security/2023/dsa-5508
• Fedora Security Advisory FEDORA-EPEL-2023-CCA1F87440 vom 2023-09-30
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-cca1f87440
• Debian Security Advisory DSA-5510 vom 2023-09-30
  https://www.debian.org/security/2023/dsa-5510
• Fedora Security Advisory FEDORA-EPEL-2023-EDC9C74369 vom 2023-09-30
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-edc9c74369
• Release notes for Microsoft Edge Security Updates vom 2023-10-01
  https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security#september-29-2023
• Ubuntu Security Notice USN-6403-1 vom 2023-10-02
  https://ubuntu.com/security/notices/USN-6403-1
• IGEL Security Notice ISN-2023-21 vom 2023-10-05
  https://kb.igel.com/securitysafety/en/isn-2023-21-libvpx-vulnerability-in-chromium-and-firefox-101063307.html
• Red Hat Security Advisory RHSA-2023:5536 vom 2023-10-16
  https://access.redhat.com/errata/RHSA-2023:5536.html
• Red Hat Security Advisory RHSA-2023:5537 vom 2023-10-16
  https://access.redhat.com/errata/RHSA-2023:5537.html
• Red Hat Security Advisory RHSA-2023:5538 vom 2023-10-16
  https://access.redhat.com/errata/RHSA-2023:5538.html
• Red Hat Security Advisory RHSA-2023:5539 vom 2023-10-16
  https://access.redhat.com/errata/RHSA-2023:5539.html
• Ubuntu Security Notice USN-6403-2 vom 2023-10-23
  https://ubuntu.com/security/notices/USN-6403-2
• Gentoo Linux Security Advisory GLSA-202401-34 vom 2024-01-31
  https://security.gentoo.org/glsa/202401-34
• FortiGuard Labs PSIRT Advisory FG-IR-23-381 vom 2025-01-14
  https://www.fortiguard.com/psirt/FG-IR-23-381