Google Chrome und Microsoft Edge: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 6

• High 8.8
  CVE-2023-6702 Public exploit EPSS 44%

  Type confusion in V8 in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap cor…

  Google Chrome chromium qt6-qtwebengine Browsers Debian Alpine
  Dec 14, 2023
• High 8.8
  CVE-2023-6703

  Use after free in Blink in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap …

  Google Chrome chromium qt6-qtwebengine Browsers Debian Alpine
  Dec 14, 2023
• High 8.8
  CVE-2023-6705

  Use after free in WebRTC in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap…

  Google Chrome chromium qt6-qtwebengine Browsers Debian Alpine
  Dec 14, 2023
• High 8.8
  CVE-2023-6706

  Use after free in FedCM in Google Chrome prior to 120.0.6099.109 allowed a remote attacker who convinced a user to enga…

  Google Chrome chromium qt6-qtwebengine Browsers Debian Alpine
  Dec 14, 2023
• High 8.8
  CVE-2023-6707

  Use after free in CSS in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap co…

  Google Chrome chromium Browsers Debian
  Dec 14, 2023
• Unscored —
  CVE-2023-6704

  Use after free in libavif in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit hea…

  Google Chrome chromium libavif Browsers Debian
  Dec 14, 2023

Revision history

1. 2024-02-18 #7

   Neue Updates von Gentoo aufgenommen

2. 2024-02-08 #6

   Neue Updates von SUSE aufgenommen

3. 2024-01-31 #5

   Neue Updates von Gentoo aufgenommen

4. 2023-12-21 #4

   Neue Updates von Fedora aufgenommen

5. 2023-12-14 #3

   Neue Updates von Fedora aufgenommen

6. 2023-12-13 #2

   Microsoft Edge auch betroffen, noch kein Patch verfügbar

7. 2023-12-12 #1

   Initiale Fassung

References

• Stable Channel Update for Desktop vom 2023-12-12
  http://chromereleases.googleblog.com/2023/12/stable-channel-update-for-desktop_12.html
• Release notes for Microsoft Edge Security Updates vom 2023-12-13
  https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security
• Fedora Security Advisory FEDORA-2023-1FE02CA797 vom 2023-12-13
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-1fe02ca797
• Debian Security Advisory DSA-5577 vom 2023-12-14
  https://lists.debian.org/debian-security-announce/2023/msg00273.html
• Fedora Security Advisory FEDORA-EPEL-2023-A79D31DF77 vom 2023-12-14
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-a79d31df77
• Fedora Security Advisory FEDORA-2023-3D9F7CA27F vom 2023-12-14
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-3d9f7ca27f
• Fedora Security Advisory FEDORA-EPEL-2023-5418332424 vom 2023-12-14
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-5418332424
• Fedora Security Advisory FEDORA-EPEL-2023-0BDF9BF395 vom 2023-12-14
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-0bdf9bf395
• Release notes for Microsoft Edge Security Updates
  https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security#december-14-2023
• Fedora Security Advisory FEDORA-EPEL-2023-B300E89045 vom 2023-12-22
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-b300e89045
• Gentoo Linux Security Advisory GLSA-202401-34 vom 2024-01-31
  https://security.gentoo.org/glsa/202401-34
• SUSE Security Update SUSE-SU-2024:0423-1 vom 2024-02-08
  https://lists.suse.com/pipermail/sle-security-updates/2024-February/017888.html
• Gentoo Linux Security Advisory GLSA-202402-14 vom 2024-02-18
  https://security.gentoo.org/glsa/202402-14