DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Google Chrome: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2023-08-02
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Google Chrome ausnutzen, um einen Cross-Site-Script-Angriff auszuführen, beliebigen Code auszuführen und vertrauliche Informationen preiszugeben.
01
beschreibt (11)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-4078US | high8.8 | — | ||
Inappropriate implementation in Extensions in Google Chrome prior to 115.0.5790.170 allowed an attacker who convinced a user to install a malicious extension to inject scripts or H… | ||||
| CVE-2023-4077US | high8.8 | — | ||
Insufficient data validation in Extensions in Google Chrome prior to 115.0.5790.170 allowed an attacker who convinced a user to install a malicious extension to inject scripts or H… | ||||
| CVE-2023-4076US | high8.8 | — | ||
Use after free in WebRTC in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted WebRTC session. (Chromium security… | ||||
| CVE-2023-4075US | high8.8 | — | ||
Use after free in Cast in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severit… | ||||
| CVE-2023-4074US | high8.8 | — | ||
Use after free in Blink Task Scheduling in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium… | ||||
| CVE-2023-4073US | high8.8 | — | ||
Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro… | ||||
| CVE-2023-4072US | high8.8 | — | ||
Out of bounds read and write in WebGL in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium s… | ||||
| CVE-2023-4071US | high8.8 | — | ||
Heap buffer overflow in Visuals in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium securit… | ||||
| CVE-2023-4070US | high8.1 | — | ||
Type Confusion in V8 in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High) | ||||
| CVE-2023-4069US | high8.8 | — | ||
Type Confusion in V8 in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity:… | ||||
| CVE-2023-4068US | high8.1 | — | ||
Type Confusion in V8 in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High) | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Google Chrome Security Releases vom 2023-08-02external
- Debian Security Advisory DSA-5467 vom 2023-08-04external
- Gentoo Linux Security Advisory GLSA-202311-11 vom 2023-11-25external
- Gentoo Linux Security Advisory GLSA-202401-34 vom 2024-01-31external
- WID-SEC-W-2023-1950 - CSAF Versionself
- WID-SEC-2023-1950 - Portal Versionself
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan