High WID-SEC-2023-2630 15 CVEs

Google Chrome und Microsoft Edge: Mehrere Schwachstellen

Published Oct 10, 2023 · Updated Nov 19, 2024 · Revision 10 · de-DE

Vendor: Debian Vendor: Fedora Vendor: gentoo Vendor: Google Vendor: IGEL Vendor: Microsoft Vendor: Oracle Product: Chrome Product: Edge Product: Linux Product: Linux Product: Linux Product: Linux Product: OS Platform: Linux Platform: macOS Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Chrome und Microsoft Edge ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand zu verursachen.

Product

Chrome ist ein Internet-Browser von Google.
Edge ist ein Web Browser von Microsoft.

Vulnerabilities 15

High 8.8

CVE-2023-5218

Use after free in Site Isolation in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to potentially explo…

Google Chrome chromium qt6-qtwebengine Browsers Debian Alpine

Oct 11, 2023
High 8.8

CVE-2023-5474

Heap buffer overflow in PDF in Google Chrome prior to 118.0.5993.70 allowed a remote attacker who convinced a user to e…

Google Chrome chromium qt6-qtwebengine Browsers Debian Alpine

Oct 11, 2023
High 8.8

CVE-2023-5476

Use after free in Blink History in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to potentially exploi…

Google Chrome chromium qt6-qtwebengine Browsers Debian Alpine

Oct 11, 2023
Medium 6.5

CVE-2023-36409

Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

Microsoft Microsoft Edge (Chromium-based) Browsers

Nov 6, 2023
Medium 4.3

CVE-2023-5485

Inappropriate implementation in Autofill in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to bypass au…

Google Chrome chromium Browsers Debian

Oct 11, 2023
Unscored —

CVE-2023-5473

Use after free in Cast in Google Chrome prior to 118.0.5993.70 allowed a remote attacker who had compromised the render…

Google Chrome chromium Browsers Debian

Oct 11, 2023
Unscored —

CVE-2023-5475

Inappropriate implementation in DevTools in Google Chrome prior to 118.0.5993.70 allowed an attacker who convinced a us…

Google Chrome chromium qt6-qtwebengine Browsers Debian Alpine

Oct 11, 2023
Unscored —

CVE-2023-5477

Inappropriate implementation in Installer in Google Chrome prior to 118.0.5993.70 allowed a local attacker to bypass di…

Google Chrome chromium Browsers Debian

Oct 11, 2023
Unscored —

CVE-2023-5478

Inappropriate implementation in Autofill in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to leak cros…

Google Chrome chromium Browsers Debian

Oct 11, 2023
Unscored —

CVE-2023-5479

Inappropriate implementation in Extensions API in Google Chrome prior to 118.0.5993.70 allowed an attacker who convince…

Google Chrome chromium Browsers Debian

Oct 11, 2023
Unscored —

CVE-2023-5481

Inappropriate implementation in Downloads in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to spoof se…

Google Chrome chromium Browsers Debian

Oct 11, 2023
Unscored —

CVE-2023-5483

Inappropriate implementation in Intents in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to bypass con…

Google Chrome chromium Browsers Debian

Oct 11, 2023
Unscored —

CVE-2023-5484

Inappropriate implementation in Navigation in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to spoof s…

Google Chrome chromium qt6-qtwebengine Browsers Debian Alpine

Oct 11, 2023
Unscored —

CVE-2023-5486

Inappropriate implementation in Input in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to spoof securi…

Google Chrome chromium qt6-qtwebengine Browsers Debian Alpine

Oct 11, 2023
Unscored —

CVE-2023-5487

Inappropriate implementation in Fullscreen in Google Chrome prior to 118.0.5993.70 allowed an attacker who convinced a …

Google Chrome chromium qt6-qtwebengine Browsers Debian Alpine

Oct 11, 2023

Revision history

2024-11-19 #10
Neue Updates von Oracle Linux aufgenommen
2024-11-04 #9
Neue Updates von Oracle Linux aufgenommen
2024-02-04 #8
Neue Updates von Gentoo aufgenommen
2024-01-31 #7
Neue Updates von Gentoo aufgenommen
2023-11-26 #6
Neue Updates von Gentoo aufgenommen
2023-10-22 #5
Neue Updates von Fedora aufgenommen
2023-10-15 #4
Neue Updates von IGEL aufgenommen
2023-10-12 #3
Neue Updates von Debian aufgenommen
2023-10-11 #2
Neue Updates von Fedora aufgenommen
2023-10-10 #1
Initiale Fassung

References

Gentoo Linux Security Advisory GLSA-202401-34 vom 2024-01-31
https://security.gentoo.org/glsa/202401-34
Gentoo Linux Security Advisory GLSA-202402-05 vom 2024-02-03
https://security.gentoo.org/glsa/202402-05
Google Chrome Release - Stable Channel Update for Desktop vom 2023-10-10
https://chromereleases.googleblog.com/2023/10/stable-channel-update-for-desktop_10.html
Release notes for Microsoft Edge Security Updates vom 2023-10-10
https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security
Fedora Security Advisory FEDORA-2023-11AC66E61E vom 2023-10-12
https://bodhi.fedoraproject.org/updates/FEDORA-2023-11ac66e61e
Fedora Security Advisory FEDORA-2023-1C6A20AA0A vom 2023-10-12
https://bodhi.fedoraproject.org/updates/FEDORA-2023-1c6a20aa0a
Fedora Security Advisory FEDORA-2023-8C9FD2A001 vom 2023-10-12
https://bodhi.fedoraproject.org/updates/FEDORA-2023-8c9fd2a001
Fedora Security Advisory FEDORA-EPEL-2023-2E7253946A vom 2023-10-12
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-2e7253946a
Fedora Security Advisory FEDORA-EPEL-2023-C730EF027D vom 2023-10-12
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-c730ef027d
Fedora Security Advisory FEDORA-EPEL-2023-53A7BC5700 vom 2023-10-12
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-53a7bc5700
Debian Security Advisory DSA-5526 vom 2023-10-13
https://www.debian.org/security/2023/dsa-5526
Release notes for Microsoft Edge Security Updates vom 2023-10-13
https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security
IGEL Security Notice ISN-2023-24 vom 2023-10-13
https://kb.igel.com/securitysafety/en/isn-2023-24-chromium-vulnerability-101065821.html
Fedora Security Advisory FEDORA-2023-649469C298 vom 2023-10-23
https://bodhi.fedoraproject.org/updates/FEDORA-2023-649469c298
Gentoo Linux Security Advisory GLSA-202311-11 vom 2023-11-25
https://security.gentoo.org/glsa/202311-11
Oracle Linux Security Advisory ELSA-2024-8800 vom 2024-11-04
https://linux.oracle.com/errata/ELSA-2024-8800.html
Oracle Linux Security Advisory ELSA-2024-9548 vom 2024-11-19
https://linux.oracle.com/errata/ELSA-2024-9548.html