High WID-SEC-2023-2790 13 CVEs

Google Chrome: Mehrere Schwachstellen

Published Oct 31, 2023 · Updated Jan 31, 2024 · Revision 6 · de-DE

Vendor: Debian Vendor: Fedora Vendor: gentoo Vendor: Google Vendor: IGEL Product: Chrome Product: Chrome Linux Stable Channel < 119.0.6045.105 Product: Chrome Mac Stable Channel < 119.0.6045.105 Product: Chrome Windows Stable Channel < 119.0.6045.105 Product: Chrome Windows Stable Channel < 119.0.6045.106 Product: Linux Product: Linux Product: Linux Product: OS Platform: Linux Platform: macOS Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Chrome ausnutzen, um beliebigen Programmcode auszuführen, Informationen falsch darzustellen und Informationen offenzulegen.

Product

Chrome ist ein Internet-Browser von Google.

Vulnerabilities 13

High 8.8

CVE-2023-5482

Insufficient data validation in USB in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to perform out o…

Google Chrome chromium qt6-qtwebengine Browsers Debian Alpine

Nov 1, 2023
High 8.8

CVE-2023-5849

Integer overflow in USB in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to potentially exploit heap …

Google Chrome chromium qt6-qtwebengine Browsers Debian Alpine

Nov 1, 2023
High 8.8

CVE-2023-5852

Use after free in Printing in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to e…

Google Chrome chromium Browsers Debian

Nov 1, 2023
High 8.8

CVE-2023-5854

Use after free in Profiles in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to e…

Google Chrome chromium Browsers Debian

Nov 1, 2023
High 8.8

CVE-2023-5855

Use after free in Reading Mode in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user …

Google Chrome chromium Browsers Debian

Nov 1, 2023
High 8.8

CVE-2023-5856

Use after free in Side Panel in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to…

Google Chrome chromium Browsers Debian

Nov 1, 2023
Medium 4.3

CVE-2023-5858

Inappropriate implementation in WebApp Provider in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to o…

Google Chrome chromium Browsers Debian

Nov 1, 2023
Unscored —

CVE-2023-5480

Inappropriate implementation in Payments in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to bypass X…

Google Chrome chromium Browsers Debian

Nov 1, 2023
Unscored —

CVE-2023-5850

Incorrect security UI in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to perform domain…

Google Chrome chromium Browsers Debian

Nov 1, 2023
Unscored —

CVE-2023-5851

Inappropriate implementation in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to obfusca…

Google Chrome chromium Browsers Debian

Nov 1, 2023
Unscored —

CVE-2023-5853

Incorrect security UI in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to obfuscate secu…

Google Chrome chromium Browsers Debian

Nov 1, 2023
Unscored —

CVE-2023-5857

Inappropriate implementation in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to potenti…

Google Chrome chromium Browsers Debian

Nov 1, 2023
Unscored —

CVE-2023-5859

Incorrect security UI in Picture In Picture in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to perfo…

Google Chrome chromium Browsers Debian

Nov 1, 2023

Revision history

2024-01-31 #6
Neue Updates von Gentoo aufgenommen
2023-11-26 #5
Neue Updates von Gentoo aufgenommen
2023-11-12 #4
Neue Updates von Fedora aufgenommen
2023-11-09 #3
Neue Updates von IGEL aufgenommen
2023-11-05 #2
Neue Updates von Fedora und Debian aufgenommen
2023-10-31 #1
Initiale Fassung

References

Chrome Stable Channel Update for Desktop vom 2023-10-31
http://chromereleases.googleblog.com/2023/10/stable-channel-update-for-desktop_31.html
Fedora Security Advisory FEDORA-EPEL-2023-14C0898D9A vom 2023-11-06
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-14c0898d9a
Fedora Security Advisory FEDORA-2023-4CE457DB98 vom 2023-11-06
https://bodhi.fedoraproject.org/updates/FEDORA-2023-4ce457db98
Fedora Security Advisory FEDORA-EPEL-2023-CA644CAD1F vom 2023-11-06
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-ca644cad1f
Fedora Security Advisory FEDORA-EPEL-2023-6E863522F4 vom 2023-11-06
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-6e863522f4
Debian Security Advisory DSA-5546 vom 2023-11-03
https://www.debian.org/security/2023/dsa-5546
Debian Security Advisory DSA-5546 vom 2023-11-03
https://lists.debian.org/debian-security-announce/2023/msg00242.html
IGEL Security Notice ISN-2023-29 vom 2023-11-09
https://kb.igel.com/securitysafety/en/isn-2023-29-chromium-vulnerabilities-105089371.html
Fedora Security Advisory FEDORA-EPEL-2023-ECA2DAF875 vom 2023-11-10
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-eca2daf875
Fedora Security Advisory FEDORA-2023-F83B5E84D3 vom 2023-11-10
https://bodhi.fedoraproject.org/updates/FEDORA-2023-f83b5e84d3
Fedora Security Advisory FEDORA-EPEL-2023-E296B98814 vom 2023-11-10
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-e296b98814
Fedora Security Advisory FEDORA-EPEL-2023-F535D91D21 vom 2023-11-10
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-f535d91d21
Gentoo Linux Security Advisory GLSA-202311-11 vom 2023-11-25
https://security.gentoo.org/glsa/202311-11
Gentoo Linux Security Advisory GLSA-202401-34 vom 2024-01-31
https://security.gentoo.org/glsa/202401-34