Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2023-1818 (GCVE-0-2023-1818)
Vulnerability from cvelistv5 – Published: 2023-04-04 21:39 – Updated: 2025-02-13 16:39- Use after free
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-02T06:05:25.514Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop.html"
},
{
"tags": [
"x_transferred"
],
"url": "https://crbug.com/1223346"
},
{
"tags": [
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/"
},
{
"tags": [
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/"
},
{
"tags": [
"x_transferred"
],
"url": "https://www.debian.org/security/2023/dsa-5386"
},
{
"tags": [
"x_transferred"
],
"url": "https://security.gentoo.org/glsa/202309-17"
}
],
"title": "CVE Program Container"
},
{
"affected": [
{
"cpes": [
"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "chrome",
"vendor": "google",
"versions": [
{
"lessThan": "112.0.5615.49",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2023-1818",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-10-07T13:47:01.255696Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-416",
"description": "CWE-416 Use After Free",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-10-07T14:10:18.175Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Chrome",
"vendor": "Google",
"versions": [
{
"lessThan": "112.0.5615.49",
"status": "affected",
"version": "112.0.5615.49",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Use after free in Vulkan in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)"
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Use after free",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2023-09-30T10:07:36.221Z",
"orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
"shortName": "Chrome"
},
"references": [
{
"url": "https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop.html"
},
{
"url": "https://crbug.com/1223346"
},
{
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/"
},
{
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/"
},
{
"url": "https://www.debian.org/security/2023/dsa-5386"
},
{
"url": "https://security.gentoo.org/glsa/202309-17"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
"assignerShortName": "Chrome",
"cveId": "CVE-2023-1818",
"datePublished": "2023-04-04T21:39:35.092Z",
"dateReserved": "2023-04-03T20:48:53.064Z",
"dateUpdated": "2025-02-13T16:39:36.365Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2023-1818",
"date": "2026-05-19",
"epss": "0.00699",
"percentile": "0.72198"
},
"fkie_nvd": {
"configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"112.0.5615.49\", \"matchCriteriaId\": \"A9213D4B-0D26-4E22-9995-995F1DD38C28\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E30D0E6F-4AE8-4284-8716-991DFA48CC5D\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"FA6FEEC2-9F11-4643-8827-749718254FED\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"Use after free in Vulkan in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)\"}]",
"id": "CVE-2023-1818",
"lastModified": "2024-11-21T07:39:57.823",
"metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\", \"baseScore\": 8.8, \"baseSeverity\": \"HIGH\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"REQUIRED\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 2.8, \"impactScore\": 5.9}, {\"source\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"type\": \"Secondary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\", \"baseScore\": 8.8, \"baseSeverity\": \"HIGH\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"REQUIRED\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 2.8, \"impactScore\": 5.9}]}",
"published": "2023-04-04T22:15:07.623",
"references": "[{\"url\": \"https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop.html\", \"source\": \"chrome-cve-admin@google.com\", \"tags\": [\"Release Notes\", \"Vendor Advisory\"]}, {\"url\": \"https://crbug.com/1223346\", \"source\": \"chrome-cve-admin@google.com\", \"tags\": [\"Issue Tracking\", \"Permissions Required\", \"Third Party Advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/\", \"source\": \"chrome-cve-admin@google.com\", \"tags\": [\"Mailing List\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/\", \"source\": \"chrome-cve-admin@google.com\", \"tags\": [\"Mailing List\"]}, {\"url\": \"https://security.gentoo.org/glsa/202309-17\", \"source\": \"chrome-cve-admin@google.com\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://www.debian.org/security/2023/dsa-5386\", \"source\": \"chrome-cve-admin@google.com\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Release Notes\", \"Vendor Advisory\"]}, {\"url\": \"https://crbug.com/1223346\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Issue Tracking\", \"Permissions Required\", \"Third Party Advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\"]}, {\"url\": \"https://security.gentoo.org/glsa/202309-17\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://www.debian.org/security/2023/dsa-5386\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}]",
"sourceIdentifier": "chrome-cve-admin@google.com",
"vulnStatus": "Modified",
"weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-416\"}]}, {\"source\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"type\": \"Secondary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-416\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2023-1818\",\"sourceIdentifier\":\"chrome-cve-admin@google.com\",\"published\":\"2023-04-04T22:15:07.623\",\"lastModified\":\"2024-11-21T07:39:57.823\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Use after free in Vulkan in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"baseScore\":8.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.8,\"impactScore\":5.9},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"baseScore\":8.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.8,\"impactScore\":5.9}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-416\"}]},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-416\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"112.0.5615.49\",\"matchCriteriaId\":\"A9213D4B-0D26-4E22-9995-995F1DD38C28\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E30D0E6F-4AE8-4284-8716-991DFA48CC5D\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FA6FEEC2-9F11-4643-8827-749718254FED\"}]}]}],\"references\":[{\"url\":\"https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop.html\",\"source\":\"chrome-cve-admin@google.com\",\"tags\":[\"Release Notes\",\"Vendor Advisory\"]},{\"url\":\"https://crbug.com/1223346\",\"source\":\"chrome-cve-admin@google.com\",\"tags\":[\"Issue Tracking\",\"Permissions Required\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/\",\"source\":\"chrome-cve-admin@google.com\",\"tags\":[\"Mailing List\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/\",\"source\":\"chrome-cve-admin@google.com\",\"tags\":[\"Mailing List\"]},{\"url\":\"https://security.gentoo.org/glsa/202309-17\",\"source\":\"chrome-cve-admin@google.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.debian.org/security/2023/dsa-5386\",\"source\":\"chrome-cve-admin@google.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\",\"Vendor Advisory\"]},{\"url\":\"https://crbug.com/1223346\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\",\"Permissions Required\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\"]},{\"url\":\"https://security.gentoo.org/glsa/202309-17\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.debian.org/security/2023/dsa-5386\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]}]}}",
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop.html\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://crbug.com/1223346\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://www.debian.org/security/2023/dsa-5386\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://security.gentoo.org/glsa/202309-17\", \"tags\": [\"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-02T06:05:25.514Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 8.8, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"REQUIRED\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2023-1818\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-10-07T13:47:01.255696Z\"}}}], \"affected\": [{\"cpes\": [\"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*\"], \"vendor\": \"google\", \"product\": \"chrome\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"112.0.5615.49\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-416\", \"description\": \"CWE-416 Use After Free\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-10-07T14:10:12.915Z\"}}], \"cna\": {\"affected\": [{\"vendor\": \"Google\", \"product\": \"Chrome\", \"versions\": [{\"status\": \"affected\", \"version\": \"112.0.5615.49\", \"lessThan\": \"112.0.5615.49\", \"versionType\": \"custom\"}]}], \"references\": [{\"url\": \"https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop.html\"}, {\"url\": \"https://crbug.com/1223346\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/\"}, {\"url\": \"https://www.debian.org/security/2023/dsa-5386\"}, {\"url\": \"https://security.gentoo.org/glsa/202309-17\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"Use after free in Vulkan in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"description\": \"Use after free\"}]}], \"providerMetadata\": {\"orgId\": \"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28\", \"shortName\": \"Chrome\", \"dateUpdated\": \"2023-09-30T10:07:36.221Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2023-1818\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-02-13T16:39:36.365Z\", \"dateReserved\": \"2023-04-03T20:48:53.064Z\", \"assignerOrgId\": \"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28\", \"datePublished\": \"2023-04-04T21:39:35.092Z\", \"assignerShortName\": \"Chrome\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
}
}
CERTFR-2023-AVI-0284
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans Google Chrome. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
None| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Google Chrome versions ant\u00e9rieures \u00e0 112.0.5615.49 (Linux et Mac)",
"product": {
"name": "Chrome",
"vendor": {
"name": "Google",
"scada": false
}
}
},
{
"description": "Google Chrome versions ant\u00e9rieures \u00e0 112.0.5615.49/50 (Windows)",
"product": {
"name": "Chrome",
"vendor": {
"name": "Google",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2023-1814",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1814"
},
{
"name": "CVE-2023-1822",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1822"
},
{
"name": "CVE-2023-1811",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1811"
},
{
"name": "CVE-2023-1819",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1819"
},
{
"name": "CVE-2023-1815",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1815"
},
{
"name": "CVE-2023-1812",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1812"
},
{
"name": "CVE-2023-1816",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1816"
},
{
"name": "CVE-2023-1818",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1818"
},
{
"name": "CVE-2023-1820",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1820"
},
{
"name": "CVE-2023-1813",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1813"
},
{
"name": "CVE-2023-1821",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1821"
},
{
"name": "CVE-2023-1823",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1823"
},
{
"name": "CVE-2023-1810",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1810"
},
{
"name": "CVE-2023-1817",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1817"
}
],
"links": [],
"reference": "CERTFR-2023-AVI-0284",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2023-04-05T00:00:00.000000"
}
],
"risks": [
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans \u003cspan\nclass=\"textit\"\u003eGoogle Chrome\u003c/span\u003e. Elles permettent \u00e0 un attaquant de\nprovoquer un probl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Google Chrome",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Google Chrome du 04 avril 2023",
"url": "https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop.html"
}
]
}
CERTFR-2023-AVI-0293
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans Microsoft Edge. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur et un contournement de la politique de sécurité.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
None| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Microsoft Edge versions ant\u00e9rieures \u00e0 112.0.1722.34",
"product": {
"name": "Edge",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2023-1814",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1814"
},
{
"name": "CVE-2023-24935",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-24935"
},
{
"name": "CVE-2023-1822",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1822"
},
{
"name": "CVE-2023-1811",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1811"
},
{
"name": "CVE-2023-1819",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1819"
},
{
"name": "CVE-2023-28301",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-28301"
},
{
"name": "CVE-2023-1815",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1815"
},
{
"name": "CVE-2023-1812",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1812"
},
{
"name": "CVE-2023-1816",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1816"
},
{
"name": "CVE-2023-1818",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1818"
},
{
"name": "CVE-2023-1820",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1820"
},
{
"name": "CVE-2023-1813",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1813"
},
{
"name": "CVE-2023-1821",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1821"
},
{
"name": "CVE-2023-1823",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1823"
},
{
"name": "CVE-2023-1810",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1810"
},
{
"name": "CVE-2023-1817",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1817"
},
{
"name": "CVE-2023-28284",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-28284"
}
],
"links": [],
"reference": "CERTFR-2023-AVI-0293",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2023-04-07T00:00:00.000000"
}
],
"risks": [
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Microsoft Edge.\nElles permettent \u00e0 un attaquant de provoquer un probl\u00e8me de s\u00e9curit\u00e9 non\nsp\u00e9cifi\u00e9 par l\u0027\u00e9diteur et un contournement de la politique de s\u00e9curit\u00e9.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Microsoft Edge",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2023-28284 du 06 avril 2023",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28284"
}
]
}
CERTFR-2023-AVI-0284
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans Google Chrome. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
None| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Google Chrome versions ant\u00e9rieures \u00e0 112.0.5615.49 (Linux et Mac)",
"product": {
"name": "Chrome",
"vendor": {
"name": "Google",
"scada": false
}
}
},
{
"description": "Google Chrome versions ant\u00e9rieures \u00e0 112.0.5615.49/50 (Windows)",
"product": {
"name": "Chrome",
"vendor": {
"name": "Google",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2023-1814",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1814"
},
{
"name": "CVE-2023-1822",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1822"
},
{
"name": "CVE-2023-1811",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1811"
},
{
"name": "CVE-2023-1819",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1819"
},
{
"name": "CVE-2023-1815",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1815"
},
{
"name": "CVE-2023-1812",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1812"
},
{
"name": "CVE-2023-1816",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1816"
},
{
"name": "CVE-2023-1818",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1818"
},
{
"name": "CVE-2023-1820",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1820"
},
{
"name": "CVE-2023-1813",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1813"
},
{
"name": "CVE-2023-1821",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1821"
},
{
"name": "CVE-2023-1823",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1823"
},
{
"name": "CVE-2023-1810",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1810"
},
{
"name": "CVE-2023-1817",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1817"
}
],
"links": [],
"reference": "CERTFR-2023-AVI-0284",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2023-04-05T00:00:00.000000"
}
],
"risks": [
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans \u003cspan\nclass=\"textit\"\u003eGoogle Chrome\u003c/span\u003e. Elles permettent \u00e0 un attaquant de\nprovoquer un probl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Google Chrome",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Google Chrome du 04 avril 2023",
"url": "https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop.html"
}
]
}
CERTFR-2023-AVI-0293
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans Microsoft Edge. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur et un contournement de la politique de sécurité.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
None| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Microsoft Edge versions ant\u00e9rieures \u00e0 112.0.1722.34",
"product": {
"name": "Edge",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2023-1814",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1814"
},
{
"name": "CVE-2023-24935",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-24935"
},
{
"name": "CVE-2023-1822",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1822"
},
{
"name": "CVE-2023-1811",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1811"
},
{
"name": "CVE-2023-1819",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1819"
},
{
"name": "CVE-2023-28301",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-28301"
},
{
"name": "CVE-2023-1815",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1815"
},
{
"name": "CVE-2023-1812",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1812"
},
{
"name": "CVE-2023-1816",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1816"
},
{
"name": "CVE-2023-1818",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1818"
},
{
"name": "CVE-2023-1820",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1820"
},
{
"name": "CVE-2023-1813",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1813"
},
{
"name": "CVE-2023-1821",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1821"
},
{
"name": "CVE-2023-1823",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1823"
},
{
"name": "CVE-2023-1810",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1810"
},
{
"name": "CVE-2023-1817",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1817"
},
{
"name": "CVE-2023-28284",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-28284"
}
],
"links": [],
"reference": "CERTFR-2023-AVI-0293",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2023-04-07T00:00:00.000000"
}
],
"risks": [
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Microsoft Edge.\nElles permettent \u00e0 un attaquant de provoquer un probl\u00e8me de s\u00e9curit\u00e9 non\nsp\u00e9cifi\u00e9 par l\u0027\u00e9diteur et un contournement de la politique de s\u00e9curit\u00e9.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Microsoft Edge",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2023-28284 du 06 avril 2023",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28284"
}
]
}
BDU:2023-01873
Vulnerability from fstec - Published: 04.04.2023{
"CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"CVSS 3.0": "AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
"CVSS 4.0": null,
"remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
"remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
"\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u041e\u041e\u041e \u00ab\u0420\u0443\u0441\u0411\u0418\u0422\u0435\u0445-\u0410\u0441\u0442\u0440\u0430\u00bb, Google Inc, \u0410\u041e \"\u041d\u041f\u041f\u041a\u0422\"",
"\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "1.6 \u00ab\u0421\u043c\u043e\u043b\u0435\u043d\u0441\u043a\u00bb (Astra Linux Special Edition), 1.7 (Astra Linux Special Edition), 4.7 (Astra Linux Special Edition), \u0434\u043e 112.0.5615.49 (Google Chrome), \u0434\u043e 2.8 (\u041e\u0421\u041e\u041d \u041e\u0421\u043d\u043e\u0432\u0430 \u041enyx)",
"\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop.html\n\n\u0414\u043b\u044f Astra Linux 1.6 \u00ab\u0421\u043c\u043e\u043b\u0435\u043d\u0441\u043a\u00bb:\nhttps://wiki.astralinux.ru/astra-linux-se16-bulletin-20230525SE16MD\n\n\u0414\u043b\u044f \u041e\u0421 Astra Linux:\n\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f: https://wiki.astralinux.ru/astra-linux-se17-bulletin-2023-0630SE17MD\n\n\u0414\u043b\u044f \u041e\u0421\u041e\u041d \u041e\u0421\u043d\u043e\u0432\u0430 \u041enyx:\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f chromium \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 115.0.5790.98+repack-1~deb11u1.osnova1\n\n\u0414\u043b\u044f \u041e\u0421 Astra Linux Special Edition \u0434\u043b\u044f \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b ARM 4.7:\n\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f: https://wiki.astralinux.ru/astra-linux-se47-bulletin-2023-0907SE47\n\n\u0414\u043b\u044f Astra Linux 1.6 \u00ab\u0421\u043c\u043e\u043b\u0435\u043d\u0441\u043a\u00bb:\n\u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u0430\u043a\u0435\u0442 chromium \u0434\u043e 1:119.0.6045.199-0astragost0+ci202311302128+astra6 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f: https://wiki.astralinux.ru/astra-linux-se16-bulletin-20231214SE16",
"\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "04.04.2023",
"\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "26.12.2023",
"\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "07.04.2023",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2023-01873",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2023-1818",
"\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
"\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
"\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Astra Linux Special Edition (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u2116369), Google Chrome, \u041e\u0421\u041e\u041d \u041e\u0421\u043d\u043e\u0432\u0430 \u041enyx (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21165913)",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Linux - , \u041e\u041e\u041e \u00ab\u0420\u0443\u0441\u0411\u0418\u0422\u0435\u0445-\u0410\u0441\u0442\u0440\u0430\u00bb Astra Linux Special Edition 1.6 \u00ab\u0421\u043c\u043e\u043b\u0435\u043d\u0441\u043a\u00bb (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u2116369), Microsoft Corp Windows - , Apple Inc. MacOS - , \u041e\u041e\u041e \u00ab\u0420\u0443\u0441\u0411\u0418\u0422\u0435\u0445-\u0410\u0441\u0442\u0440\u0430\u00bb Astra Linux Special Edition 1.7 (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u2116369), \u041e\u041e\u041e \u00ab\u0420\u0443\u0441\u0411\u0418\u0422\u0435\u0445-\u0410\u0441\u0442\u0440\u0430\u00bb Astra Linux Special Edition 4.7 ARM (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u2116369), \u0410\u041e \"\u041d\u041f\u041f\u041a\u0422\" \u041e\u0421\u041e\u041d \u041e\u0421\u043d\u043e\u0432\u0430 \u041enyx \u0434\u043e 2.8 (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21165913)",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0440\u0435\u0436\u0438\u043c\u0430 \u0440\u0435\u043d\u0434\u0435\u0440\u0438\u043d\u0433\u0430 Vulkan \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Google Chrome, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043e\u043a\u0430\u0437\u0430\u0442\u044c \u0432\u043e\u0437\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u043d\u0430 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
"\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f (CWE-416)",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0440\u0435\u0436\u0438\u043c\u0430 \u0440\u0435\u043d\u0434\u0435\u0440\u0438\u043d\u0433\u0430 Vulkan \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Google Chrome \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u043e\u0441\u043b\u0435 \u0435\u0451 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e, \u043e\u043a\u0430\u0437\u0430\u0442\u044c \u0432\u043e\u0437\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u043d\u0430 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0439 \u0432\u0435\u0431-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b",
"\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
"\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
"\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445",
"\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop.html\nhttps://www.cybersecurity-help.cz/vdb/SB2023040501\nhttps://wiki.astralinux.ru/astra-linux-se16-bulletin-20230525SE16MD\nhttps://wiki.astralinux.ru/astra-linux-se17-bulletin-2023-0630SE17MD\nhttps://\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430.\u043d\u043f\u043f\u043a\u0442.\u0440\u0444/bin/view/\u041e\u0421\u043d\u043e\u0432\u0430/\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f/2.8/\nhttps://wiki.astralinux.ru/astra-linux-se47-bulletin-2023-0907SE47\nhttps://wiki.astralinux.ru/astra-linux-se16-bulletin-20231214SE16",
"\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
"\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430, \u041f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u0435 \u041f\u041e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c",
"\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-416",
"\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)\n\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 6,3)"
}
CNVD-2023-67089
Vulnerability from cnvd - Published: 2023-09-08厂商已发布了漏洞修复程序,请及时关注更新: https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop.html
| Name | Google Chrome <112.0.5615.49 |
|---|
{
"cves": {
"cve": {
"cveNumber": "CVE-2023-1818",
"cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2023-1818"
}
},
"description": "Google Chrome\u662f\u7f8e\u56fd\u8c37\u6b4c\uff08Google\uff09\u516c\u53f8\u7684\u4e00\u6b3eWeb\u6d4f\u89c8\u5668\u3002\n\nGoogle Chrome Vulkan\u5b58\u5728\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8eVulkan\u4e2d\u5b58\u5728\u91ca\u653e\u540e\u91cd\u7528\u95ee\u9898\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u6b64\u6f0f\u6d1e\u5728\u7cfb\u7edf\u4e0a\u6267\u884c\u4efb\u610f\u4ee3\u7801\u6216\u5bfc\u81f4\u62d2\u7edd\u670d\u52a1\u3002",
"formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop.html",
"isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
"number": "CNVD-2023-67089",
"openTime": "2023-09-08",
"patchDescription": "Google Chrome\u662f\u7f8e\u56fd\u8c37\u6b4c\uff08Google\uff09\u516c\u53f8\u7684\u4e00\u6b3eWeb\u6d4f\u89c8\u5668\u3002\r\n\r\nGoogle Chrome Vulkan\u5b58\u5728\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8eVulkan\u4e2d\u5b58\u5728\u91ca\u653e\u540e\u91cd\u7528\u95ee\u9898\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u6b64\u6f0f\u6d1e\u5728\u7cfb\u7edf\u4e0a\u6267\u884c\u4efb\u610f\u4ee3\u7801\u6216\u5bfc\u81f4\u62d2\u7edd\u670d\u52a1\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
"patchName": "Google Chrome Vulkan\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e\u7684\u8865\u4e01",
"products": {
"product": "Google Chrome \u003c112.0.5615.49"
},
"referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2023-1818",
"serverity": "\u9ad8",
"submitTime": "2023-04-07",
"title": "Google Chrome Vulkan\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e"
}
FKIE_CVE-2023-1818
Vulnerability from fkie_nvd - Published: 2023-04-04 22:15 - Updated: 2024-11-21 07:398.8 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
| Vendor | Product | Version | |
|---|---|---|---|
| chrome | * | ||
| fedoraproject | fedora | 36 | |
| fedoraproject | fedora | 37 | |
| debian | debian_linux | 11.0 |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
"matchCriteriaId": "A9213D4B-0D26-4E22-9995-995F1DD38C28",
"versionEndExcluding": "112.0.5615.49",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
"matchCriteriaId": "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
"matchCriteriaId": "E30D0E6F-4AE8-4284-8716-991DFA48CC5D",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
"matchCriteriaId": "FA6FEEC2-9F11-4643-8827-749718254FED",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Use after free in Vulkan in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)"
}
],
"id": "CVE-2023-1818",
"lastModified": "2024-11-21T07:39:57.823",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9,
"source": "nvd@nist.gov",
"type": "Primary"
},
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9,
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary"
}
]
},
"published": "2023-04-04T22:15:07.623",
"references": [
{
"source": "chrome-cve-admin@google.com",
"tags": [
"Release Notes",
"Vendor Advisory"
],
"url": "https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop.html"
},
{
"source": "chrome-cve-admin@google.com",
"tags": [
"Issue Tracking",
"Permissions Required",
"Third Party Advisory"
],
"url": "https://crbug.com/1223346"
},
{
"source": "chrome-cve-admin@google.com",
"tags": [
"Mailing List"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/"
},
{
"source": "chrome-cve-admin@google.com",
"tags": [
"Mailing List"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/"
},
{
"source": "chrome-cve-admin@google.com",
"tags": [
"Third Party Advisory"
],
"url": "https://security.gentoo.org/glsa/202309-17"
},
{
"source": "chrome-cve-admin@google.com",
"tags": [
"Third Party Advisory"
],
"url": "https://www.debian.org/security/2023/dsa-5386"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Release Notes",
"Vendor Advisory"
],
"url": "https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Issue Tracking",
"Permissions Required",
"Third Party Advisory"
],
"url": "https://crbug.com/1223346"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://security.gentoo.org/glsa/202309-17"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://www.debian.org/security/2023/dsa-5386"
}
],
"sourceIdentifier": "chrome-cve-admin@google.com",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-416"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
},
{
"description": [
{
"lang": "en",
"value": "CWE-416"
}
],
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary"
}
]
}
GHSA-CGQ6-65FG-2FVF
Vulnerability from github – Published: 2023-04-05 00:30 – Updated: 2024-10-07 21:33Use after free in Vulkan in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
{
"affected": [],
"aliases": [
"CVE-2023-1818"
],
"database_specific": {
"cwe_ids": [
"CWE-416"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2023-04-04T22:15:00Z",
"severity": "HIGH"
},
"details": "Use after free in Vulkan in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)",
"id": "GHSA-cgq6-65fg-2fvf",
"modified": "2024-10-07T21:33:27Z",
"published": "2023-04-05T00:30:39Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-1818"
},
{
"type": "WEB",
"url": "https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop.html"
},
{
"type": "WEB",
"url": "https://crbug.com/1223346"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5"
},
{
"type": "WEB",
"url": "https://security.gentoo.org/glsa/202309-17"
},
{
"type": "WEB",
"url": "https://www.debian.org/security/2023/dsa-5386"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
}
]
}
GSD-2023-1818
Vulnerability from gsd - Updated: 2023-12-13 01:20{
"GSD": {
"alias": "CVE-2023-1818",
"id": "GSD-2023-1818"
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2023-1818"
],
"details": "Use after free in Vulkan in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)",
"id": "GSD-2023-1818",
"modified": "2023-12-13T01:20:41.139370Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "chrome-cve-admin@google.com",
"ID": "CVE-2023-1818",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Chrome",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_name": "112.0.5615.49",
"version_value": "112.0.5615.49"
}
]
}
}
]
},
"vendor_name": "Google"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Use after free in Vulkan in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)"
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Use after free"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop.html",
"refsource": "MISC",
"url": "https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop.html"
},
{
"name": "https://crbug.com/1223346",
"refsource": "MISC",
"url": "https://crbug.com/1223346"
},
{
"name": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/",
"refsource": "MISC",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/"
},
{
"name": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/",
"refsource": "MISC",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/"
},
{
"name": "https://www.debian.org/security/2023/dsa-5386",
"refsource": "MISC",
"url": "https://www.debian.org/security/2023/dsa-5386"
},
{
"name": "https://security.gentoo.org/glsa/202309-17",
"refsource": "MISC",
"url": "https://security.gentoo.org/glsa/202309-17"
}
]
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "112.0.5615.49",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "chrome-cve-admin@google.com",
"ID": "CVE-2023-1818"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "Use after free in Vulkan in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)"
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "CWE-416"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop.html",
"refsource": "MISC",
"tags": [
"Release Notes",
"Vendor Advisory"
],
"url": "https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop.html"
},
{
"name": "https://crbug.com/1223346",
"refsource": "MISC",
"tags": [
"Issue Tracking",
"Permissions Required",
"Third Party Advisory"
],
"url": "https://crbug.com/1223346"
},
{
"name": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/",
"refsource": "MISC",
"tags": [
"Mailing List"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/"
},
{
"name": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/",
"refsource": "MISC",
"tags": [
"Mailing List"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/"
},
{
"name": "https://www.debian.org/security/2023/dsa-5386",
"refsource": "MISC",
"tags": [
"Third Party Advisory"
],
"url": "https://www.debian.org/security/2023/dsa-5386"
},
{
"name": "https://security.gentoo.org/glsa/202309-17",
"refsource": "MISC",
"tags": [
"Third Party Advisory"
],
"url": "https://security.gentoo.org/glsa/202309-17"
}
]
}
},
"impact": {
"baseMetricV3": {
"cvssV3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
}
},
"lastModifiedDate": "2023-10-24T17:30Z",
"publishedDate": "2023-04-04T22:15Z"
}
}
}
OPENSUSE-SU-2023:0092-1
Vulnerability from csaf_opensuse - Published: 2023-04-19 15:21 - Updated: 2023-04-19 15:21| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.x86_64 | — |
Vendor Fix
|
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for chromium",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for chromium fixes the following issues:\n\n- Chromium 112.0.5615.121:\n\n * CVE-2023-2033: Type Confusion in V8 (boo#1210478)\n\n- Chromium 112.0.5615.49 \n\n * CSS now supports nesting rules.\n * The algorithm to set the initial focus on \u003cdialog\u003e elements was updated.\n * No-op fetch() handlers on service workers are skipped from now on to make navigations faster\n * The setter for document.domain is now deprecated.\n * The recorder in devtools can now record with pierce selectors.\n * Security fixes (boo#1210126):\n * CVE-2023-1810: Heap buffer overflow in Visuals\n * CVE-2023-1811: Use after free in Frames\n * CVE-2023-1812: Out of bounds memory access in DOM Bindings\n * CVE-2023-1813: Inappropriate implementation in Extensions\n * CVE-2023-1814: Insufficient validation of untrusted input in Safe Browsing\n * CVE-2023-1815: Use after free in Networking APIs\n * CVE-2023-1816: Incorrect security UI in Picture In Picture\n * CVE-2023-1817: Insufficient policy enforcement in Intents\n * CVE-2023-1818: Use after free in Vulkan\n * CVE-2023-1819: Out of bounds read in Accessibility\n * CVE-2023-1820: Heap buffer overflow in Browser History\n * CVE-2023-1821: Inappropriate implementation in WebShare\n * CVE-2023-1822: Incorrect security UI in Navigation\n * CVE-2023-1823: Inappropriate implementation in FedCM\n\n- Chromium 111.0.5563.147:\n\n * nth-child() validation performance regression for SAP apps\n\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-2023-92",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2023_0092-1.json"
},
{
"category": "self",
"summary": "URL for openSUSE-SU-2023:0092-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BRCY3MMGSLE74IM7LN5E42APXAOQ5ZQG/"
},
{
"category": "self",
"summary": "E-Mail link for openSUSE-SU-2023:0092-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BRCY3MMGSLE74IM7LN5E42APXAOQ5ZQG/"
},
{
"category": "self",
"summary": "SUSE Bug 1210126",
"url": "https://bugzilla.suse.com/1210126"
},
{
"category": "self",
"summary": "SUSE Bug 1210478",
"url": "https://bugzilla.suse.com/1210478"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1810 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1810/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1811 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1811/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1812 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1812/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1813 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1813/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1814 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1814/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1815 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1815/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1816 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1816/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1817 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1817/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1818 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1818/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1819 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1819/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1820 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1820/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1821 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1821/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1822 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1822/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1823 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1823/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-2033 page",
"url": "https://www.suse.com/security/cve/CVE-2023-2033/"
}
],
"title": "Security update for chromium",
"tracking": {
"current_release_date": "2023-04-19T15:21:29Z",
"generator": {
"date": "2023-04-19T15:21:29Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2023:0092-1",
"initial_release_date": "2023-04-19T15:21:29Z",
"revision_history": [
{
"date": "2023-04-19T15:21:29Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"product": {
"name": "chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"product_id": "chromedriver-112.0.5615.121-bp154.2.79.1.aarch64"
}
},
{
"category": "product_version",
"name": "chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"product": {
"name": "chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"product_id": "chromium-112.0.5615.121-bp154.2.79.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"product": {
"name": "chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"product_id": "chromedriver-112.0.5615.121-bp154.2.79.1.x86_64"
}
},
{
"category": "product_version",
"name": "chromium-112.0.5615.121-bp154.2.79.1.x86_64",
"product": {
"name": "chromium-112.0.5615.121-bp154.2.79.1.x86_64",
"product_id": "chromium-112.0.5615.121-bp154.2.79.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Package Hub 15 SP4",
"product": {
"name": "SUSE Package Hub 15 SP4",
"product_id": "SUSE Package Hub 15 SP4"
}
},
{
"category": "product_name",
"name": "openSUSE Leap 15.4",
"product": {
"name": "openSUSE Leap 15.4",
"product_id": "openSUSE Leap 15.4",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.4"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "chromedriver-112.0.5615.121-bp154.2.79.1.aarch64 as component of SUSE Package Hub 15 SP4",
"product_id": "SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64"
},
"product_reference": "chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"relates_to_product_reference": "SUSE Package Hub 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromedriver-112.0.5615.121-bp154.2.79.1.x86_64 as component of SUSE Package Hub 15 SP4",
"product_id": "SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64"
},
"product_reference": "chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"relates_to_product_reference": "SUSE Package Hub 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-112.0.5615.121-bp154.2.79.1.aarch64 as component of SUSE Package Hub 15 SP4",
"product_id": "SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.aarch64"
},
"product_reference": "chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"relates_to_product_reference": "SUSE Package Hub 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-112.0.5615.121-bp154.2.79.1.x86_64 as component of SUSE Package Hub 15 SP4",
"product_id": "SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.x86_64"
},
"product_reference": "chromium-112.0.5615.121-bp154.2.79.1.x86_64",
"relates_to_product_reference": "SUSE Package Hub 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromedriver-112.0.5615.121-bp154.2.79.1.aarch64 as component of openSUSE Leap 15.4",
"product_id": "openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64"
},
"product_reference": "chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromedriver-112.0.5615.121-bp154.2.79.1.x86_64 as component of openSUSE Leap 15.4",
"product_id": "openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64"
},
"product_reference": "chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-112.0.5615.121-bp154.2.79.1.aarch64 as component of openSUSE Leap 15.4",
"product_id": "openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.aarch64"
},
"product_reference": "chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-112.0.5615.121-bp154.2.79.1.x86_64 as component of openSUSE Leap 15.4",
"product_id": "openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.x86_64"
},
"product_reference": "chromium-112.0.5615.121-bp154.2.79.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.4"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-1810",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1810"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Visuals in Google Chrome prior to 112.0.5615.49 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1810",
"url": "https://www.suse.com/security/cve/CVE-2023-1810"
},
{
"category": "external",
"summary": "SUSE Bug 1210126 for CVE-2023-1810",
"url": "https://bugzilla.suse.com/1210126"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-04-19T15:21:29Z",
"details": "important"
}
],
"title": "CVE-2023-1810"
},
{
"cve": "CVE-2023-1811",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1811"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Frames in Google Chrome prior to 112.0.5615.49 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1811",
"url": "https://www.suse.com/security/cve/CVE-2023-1811"
},
{
"category": "external",
"summary": "SUSE Bug 1210126 for CVE-2023-1811",
"url": "https://bugzilla.suse.com/1210126"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-04-19T15:21:29Z",
"details": "important"
}
],
"title": "CVE-2023-1811"
},
{
"cve": "CVE-2023-1812",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1812"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds memory access in DOM Bindings in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1812",
"url": "https://www.suse.com/security/cve/CVE-2023-1812"
},
{
"category": "external",
"summary": "SUSE Bug 1210126 for CVE-2023-1812",
"url": "https://bugzilla.suse.com/1210126"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-04-19T15:21:29Z",
"details": "important"
}
],
"title": "CVE-2023-1812"
},
{
"cve": "CVE-2023-1813",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1813"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Extensions in Google Chrome prior to 112.0.5615.49 allowed an attacker who convinced a user to install a malicious extension to bypass file access restrictions via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1813",
"url": "https://www.suse.com/security/cve/CVE-2023-1813"
},
{
"category": "external",
"summary": "SUSE Bug 1210126 for CVE-2023-1813",
"url": "https://bugzilla.suse.com/1210126"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-04-19T15:21:29Z",
"details": "important"
}
],
"title": "CVE-2023-1813"
},
{
"cve": "CVE-2023-1814",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1814"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to bypass download checking via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1814",
"url": "https://www.suse.com/security/cve/CVE-2023-1814"
},
{
"category": "external",
"summary": "SUSE Bug 1210126 for CVE-2023-1814",
"url": "https://bugzilla.suse.com/1210126"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-04-19T15:21:29Z",
"details": "important"
}
],
"title": "CVE-2023-1814"
},
{
"cve": "CVE-2023-1815",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1815"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Networking APIs in Google Chrome prior to 112.0.5615.49 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1815",
"url": "https://www.suse.com/security/cve/CVE-2023-1815"
},
{
"category": "external",
"summary": "SUSE Bug 1210126 for CVE-2023-1815",
"url": "https://bugzilla.suse.com/1210126"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-04-19T15:21:29Z",
"details": "important"
}
],
"title": "CVE-2023-1815"
},
{
"cve": "CVE-2023-1816",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1816"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in Picture In Picture in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to potentially perform navigation spoofing via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1816",
"url": "https://www.suse.com/security/cve/CVE-2023-1816"
},
{
"category": "external",
"summary": "SUSE Bug 1210126 for CVE-2023-1816",
"url": "https://bugzilla.suse.com/1210126"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-04-19T15:21:29Z",
"details": "important"
}
],
"title": "CVE-2023-1816"
},
{
"cve": "CVE-2023-1817",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1817"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Intents in Google Chrome on Android prior to 112.0.5615.49 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1817",
"url": "https://www.suse.com/security/cve/CVE-2023-1817"
},
{
"category": "external",
"summary": "SUSE Bug 1210126 for CVE-2023-1817",
"url": "https://bugzilla.suse.com/1210126"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-04-19T15:21:29Z",
"details": "important"
}
],
"title": "CVE-2023-1817"
},
{
"cve": "CVE-2023-1818",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1818"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Vulkan in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1818",
"url": "https://www.suse.com/security/cve/CVE-2023-1818"
},
{
"category": "external",
"summary": "SUSE Bug 1210126 for CVE-2023-1818",
"url": "https://bugzilla.suse.com/1210126"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-04-19T15:21:29Z",
"details": "important"
}
],
"title": "CVE-2023-1818"
},
{
"cve": "CVE-2023-1819",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1819"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in Accessibility in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1819",
"url": "https://www.suse.com/security/cve/CVE-2023-1819"
},
{
"category": "external",
"summary": "SUSE Bug 1210126 for CVE-2023-1819",
"url": "https://bugzilla.suse.com/1210126"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-04-19T15:21:29Z",
"details": "important"
}
],
"title": "CVE-2023-1819"
},
{
"cve": "CVE-2023-1820",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1820"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Browser History in Google Chrome prior to 112.0.5615.49 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1820",
"url": "https://www.suse.com/security/cve/CVE-2023-1820"
},
{
"category": "external",
"summary": "SUSE Bug 1210126 for CVE-2023-1820",
"url": "https://bugzilla.suse.com/1210126"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-04-19T15:21:29Z",
"details": "important"
}
],
"title": "CVE-2023-1820"
},
{
"cve": "CVE-2023-1821",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1821"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in WebShare in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to potentially hide the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1821",
"url": "https://www.suse.com/security/cve/CVE-2023-1821"
},
{
"category": "external",
"summary": "SUSE Bug 1210126 for CVE-2023-1821",
"url": "https://bugzilla.suse.com/1210126"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-04-19T15:21:29Z",
"details": "important"
}
],
"title": "CVE-2023-1821"
},
{
"cve": "CVE-2023-1822",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1822"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in Navigation in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1822",
"url": "https://www.suse.com/security/cve/CVE-2023-1822"
},
{
"category": "external",
"summary": "SUSE Bug 1210126 for CVE-2023-1822",
"url": "https://bugzilla.suse.com/1210126"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-04-19T15:21:29Z",
"details": "important"
}
],
"title": "CVE-2023-1822"
},
{
"cve": "CVE-2023-1823",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1823"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in FedCM in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1823",
"url": "https://www.suse.com/security/cve/CVE-2023-1823"
},
{
"category": "external",
"summary": "SUSE Bug 1210126 for CVE-2023-1823",
"url": "https://bugzilla.suse.com/1210126"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-04-19T15:21:29Z",
"details": "important"
}
],
"title": "CVE-2023-1823"
},
{
"cve": "CVE-2023-2033",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-2033"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in V8 in Google Chrome prior to 112.0.5615.121 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-2033",
"url": "https://www.suse.com/security/cve/CVE-2023-2033"
},
{
"category": "external",
"summary": "SUSE Bug 1210478 for CVE-2023-2033",
"url": "https://bugzilla.suse.com/1210478"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"SUSE Package Hub 15 SP4:chromium-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromedriver-112.0.5615.121-bp154.2.79.1.x86_64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.aarch64",
"openSUSE Leap 15.4:chromium-112.0.5615.121-bp154.2.79.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-04-19T15:21:29Z",
"details": "important"
}
],
"title": "CVE-2023-2033"
}
]
}
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.