DeutschShown in its original language — a full translation is planned for a future version.
Google Chrome und Microsoft Edge: Mehrere Schwachstellen
view advisory published 2023-02-07
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Chrome und Microsoft Edge ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen, einen Denial of Service Zustand herbeizuführen oder Sicherheitsvorkehrungen zu umgehen.
01
describes (10)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-0705US | high7.5 | — | ||
Integer overflow in Core in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who had one a race condition to potentially exploit heap corruption via a crafted HTML pa… | ||||
| CVE-2023-0704US | medium6.5 | — | ||
Insufficient policy enforcement in DevTools in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to bypass same origin policy and proxy settings via a crafted HTML pag… | ||||
| CVE-2023-0703US | high8.8 | — | ||
Type confusion in DevTools in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap… | ||||
| CVE-2023-0702US | high8.8 | — | ||
Type confusion in Data Transfer in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit… | ||||
| CVE-2023-0701US | high8.8 | — | ||
Heap buffer overflow in WebUI in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit he… | ||||
| CVE-2023-0700US | medium6.5 | — | ||
Inappropriate implementation in Download in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to potentially spoof the contents of the Omnibox (URL bar) via a crafted… | ||||
| CVE-2023-0699US | high8.8 | — | ||
Use after free in GPU in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page and browser shutdown. (Chromi… | ||||
| CVE-2023-0698US | high8.8 | — | ||
Out of bounds read in WebRTC in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security s… | ||||
| CVE-2023-0697US | medium6.5 | — | ||
Inappropriate implementation in Full screen mode in Google Chrome on Android prior to 110.0.5481.77 allowed a remote attacker to spoof the contents of the security UI via a crafted… | ||||
| CVE-2023-0696US | high8.8 | — | ||
Type confusion in V8 in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity:… | ||||
02
references
External citations — patches, advisories, analysis.
- Chromereleases 110 vom 2023-02-07external
- IGEL Security Notice ISN-2023-03 vom 2023-03-22external
- Release notes for Microsoft Edge Security Updates vom 2023-02-07external
- Debian Security Advisory DSA-5345 vom 2023-02-08external
- Gentoo Linux Security Advisory GLSA-202309-17 vom 2023-09-30external
- Ubuntu Security Notice USN-5881-1 vom 2023-02-21external
- WID-SEC-W-2023-0302 - CSAF Versionself
- WID-SEC-2023-0302 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan