DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Google Chrome und Microsoft Edge: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2023-02-07
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Chrome und Microsoft Edge ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen, einen Denial of Service Zustand herbeizuführen oder Sicherheitsvorkehrungen zu umgehen.
01
beschreibt (10)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-0705US | high7.5 | — | ||
Integer overflow in Core in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who had one a race condition to potentially exploit heap corruption via a crafted HTML pa… | ||||
| CVE-2023-0704US | medium6.5 | — | ||
Insufficient policy enforcement in DevTools in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to bypass same origin policy and proxy settings via a crafted HTML pag… | ||||
| CVE-2023-0703US | high8.8 | — | ||
Type confusion in DevTools in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap… | ||||
| CVE-2023-0702US | high8.8 | — | ||
Type confusion in Data Transfer in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit… | ||||
| CVE-2023-0701US | high8.8 | — | ||
Heap buffer overflow in WebUI in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit he… | ||||
| CVE-2023-0700US | medium6.5 | — | ||
Inappropriate implementation in Download in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to potentially spoof the contents of the Omnibox (URL bar) via a crafted… | ||||
| CVE-2023-0699US | high8.8 | — | ||
Use after free in GPU in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page and browser shutdown. (Chromi… | ||||
| CVE-2023-0698US | high8.8 | — | ||
Out of bounds read in WebRTC in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security s… | ||||
| CVE-2023-0697US | medium6.5 | — | ||
Inappropriate implementation in Full screen mode in Google Chrome on Android prior to 110.0.5481.77 allowed a remote attacker to spoof the contents of the security UI via a crafted… | ||||
| CVE-2023-0696US | high8.8 | — | ||
Type confusion in V8 in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity:… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Chromereleases 110 vom 2023-02-07external
- IGEL Security Notice ISN-2023-03 vom 2023-03-22external
- Release notes for Microsoft Edge Security Updates vom 2023-02-07external
- Debian Security Advisory DSA-5345 vom 2023-02-08external
- Gentoo Linux Security Advisory GLSA-202309-17 vom 2023-09-30external
- Ubuntu Security Notice USN-5881-1 vom 2023-02-21external
- WID-SEC-W-2023-0302 - CSAF Versionself
- WID-SEC-2023-0302 - Portal Versionself
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan