Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2023-2723 (GCVE-0-2023-2723)
Vulnerability from cvelistv5 – Published: 2023-05-16 18:45 – Updated: 2025-05-05 16:00- Use after free
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-02T06:33:05.221Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://chromereleases.googleblog.com/2023/05/stable-channel-update-for-desktop_16.html"
},
{
"tags": [
"x_transferred"
],
"url": "https://crbug.com/1435166"
},
{
"tags": [
"x_transferred"
],
"url": "https://www.debian.org/security/2023/dsa-5404"
},
{
"tags": [
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/73XUIHJ6UT75VFPDPLJOXJON7MVIKVZI/"
},
{
"tags": [
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FXFL4TDAH72PRCPD5UPZMJMKIMVOPLTI/"
},
{
"tags": [
"x_transferred"
],
"url": "https://security.gentoo.org/glsa/202309-17"
},
{
"tags": [
"x_transferred"
],
"url": "https://security.gentoo.org/glsa/202311-11"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2023-2723",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-04-23T13:28:23.212213Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-416",
"description": "CWE-416 Use After Free",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-05-05T16:00:39.211Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Chrome",
"vendor": "Google",
"versions": [
{
"lessThan": "113.0.5672.126",
"status": "affected",
"version": "113.0.5672.126",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Use after free in DevTools in Google Chrome prior to 113.0.5672.126 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)"
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Use after free",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2023-11-25T11:08:49.092Z",
"orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
"shortName": "Chrome"
},
"references": [
{
"url": "https://chromereleases.googleblog.com/2023/05/stable-channel-update-for-desktop_16.html"
},
{
"url": "https://crbug.com/1435166"
},
{
"url": "https://www.debian.org/security/2023/dsa-5404"
},
{
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/73XUIHJ6UT75VFPDPLJOXJON7MVIKVZI/"
},
{
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FXFL4TDAH72PRCPD5UPZMJMKIMVOPLTI/"
},
{
"url": "https://security.gentoo.org/glsa/202309-17"
},
{
"url": "https://security.gentoo.org/glsa/202311-11"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
"assignerShortName": "Chrome",
"cveId": "CVE-2023-2723",
"datePublished": "2023-05-16T18:45:34.099Z",
"dateReserved": "2023-05-15T21:16:58.172Z",
"dateUpdated": "2025-05-05T16:00:39.211Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2023-2723",
"date": "2026-05-19",
"epss": "0.10424",
"percentile": "0.93303"
},
"fkie_nvd": {
"configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"113.0.5672.126\", \"matchCriteriaId\": \"43A84E9E-131C-4DA1-B09E-0BFC1E3D8846\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"FA6FEEC2-9F11-4643-8827-749718254FED\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E30D0E6F-4AE8-4284-8716-991DFA48CC5D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"CC559B26-5DFC-4B7A-A27C-B77DE755DFF9\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"Use after free in DevTools in Google Chrome prior to 113.0.5672.126 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)\"}]",
"id": "CVE-2023-2723",
"lastModified": "2024-11-21T07:59:10.153",
"metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\", \"baseScore\": 8.8, \"baseSeverity\": \"HIGH\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"REQUIRED\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 2.8, \"impactScore\": 5.9}]}",
"published": "2023-05-16T19:15:09.277",
"references": "[{\"url\": \"https://chromereleases.googleblog.com/2023/05/stable-channel-update-for-desktop_16.html\", \"source\": \"chrome-cve-admin@google.com\", \"tags\": [\"Release Notes\"]}, {\"url\": \"https://crbug.com/1435166\", \"source\": \"chrome-cve-admin@google.com\", \"tags\": [\"Permissions Required\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/73XUIHJ6UT75VFPDPLJOXJON7MVIKVZI/\", \"source\": \"chrome-cve-admin@google.com\", \"tags\": [\"Mailing List\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FXFL4TDAH72PRCPD5UPZMJMKIMVOPLTI/\", \"source\": \"chrome-cve-admin@google.com\", \"tags\": [\"Mailing List\"]}, {\"url\": \"https://security.gentoo.org/glsa/202309-17\", \"source\": \"chrome-cve-admin@google.com\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://security.gentoo.org/glsa/202311-11\", \"source\": \"chrome-cve-admin@google.com\"}, {\"url\": \"https://www.debian.org/security/2023/dsa-5404\", \"source\": \"chrome-cve-admin@google.com\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://chromereleases.googleblog.com/2023/05/stable-channel-update-for-desktop_16.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Release Notes\"]}, {\"url\": \"https://crbug.com/1435166\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Permissions Required\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/73XUIHJ6UT75VFPDPLJOXJON7MVIKVZI/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FXFL4TDAH72PRCPD5UPZMJMKIMVOPLTI/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\"]}, {\"url\": \"https://security.gentoo.org/glsa/202309-17\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://security.gentoo.org/glsa/202311-11\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://www.debian.org/security/2023/dsa-5404\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}]",
"sourceIdentifier": "chrome-cve-admin@google.com",
"vulnStatus": "Modified",
"weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-416\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2023-2723\",\"sourceIdentifier\":\"chrome-cve-admin@google.com\",\"published\":\"2023-05-16T19:15:09.277\",\"lastModified\":\"2025-05-05T16:15:36.180\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Use after free in DevTools in Google Chrome prior to 113.0.5672.126 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"baseScore\":8.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.8,\"impactScore\":5.9},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"baseScore\":8.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.8,\"impactScore\":5.9}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-416\"}]},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-416\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"113.0.5672.126\",\"matchCriteriaId\":\"43A84E9E-131C-4DA1-B09E-0BFC1E3D8846\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FA6FEEC2-9F11-4643-8827-749718254FED\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E30D0E6F-4AE8-4284-8716-991DFA48CC5D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CC559B26-5DFC-4B7A-A27C-B77DE755DFF9\"}]}]}],\"references\":[{\"url\":\"https://chromereleases.googleblog.com/2023/05/stable-channel-update-for-desktop_16.html\",\"source\":\"chrome-cve-admin@google.com\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://crbug.com/1435166\",\"source\":\"chrome-cve-admin@google.com\",\"tags\":[\"Permissions Required\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/73XUIHJ6UT75VFPDPLJOXJON7MVIKVZI/\",\"source\":\"chrome-cve-admin@google.com\",\"tags\":[\"Mailing List\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FXFL4TDAH72PRCPD5UPZMJMKIMVOPLTI/\",\"source\":\"chrome-cve-admin@google.com\",\"tags\":[\"Mailing List\"]},{\"url\":\"https://security.gentoo.org/glsa/202309-17\",\"source\":\"chrome-cve-admin@google.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/202311-11\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"https://www.debian.org/security/2023/dsa-5404\",\"source\":\"chrome-cve-admin@google.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://chromereleases.googleblog.com/2023/05/stable-channel-update-for-desktop_16.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://crbug.com/1435166\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Permissions Required\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/73XUIHJ6UT75VFPDPLJOXJON7MVIKVZI/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FXFL4TDAH72PRCPD5UPZMJMKIMVOPLTI/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\"]},{\"url\":\"https://security.gentoo.org/glsa/202309-17\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/202311-11\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://www.debian.org/security/2023/dsa-5404\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]}]}}",
"vulnrichment": {
"containers": "{\"cna\": {\"affected\": [{\"vendor\": \"Google\", \"product\": \"Chrome\", \"versions\": [{\"version\": \"113.0.5672.126\", \"status\": \"affected\", \"lessThan\": \"113.0.5672.126\", \"versionType\": \"custom\"}]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"Use after free in DevTools in Google Chrome prior to 113.0.5672.126 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"description\": \"Use after free\"}]}], \"providerMetadata\": {\"orgId\": \"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28\", \"shortName\": \"Chrome\", \"dateUpdated\": \"2023-11-25T11:08:49.092Z\"}, \"references\": [{\"url\": \"https://chromereleases.googleblog.com/2023/05/stable-channel-update-for-desktop_16.html\"}, {\"url\": \"https://crbug.com/1435166\"}, {\"url\": \"https://www.debian.org/security/2023/dsa-5404\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/73XUIHJ6UT75VFPDPLJOXJON7MVIKVZI/\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FXFL4TDAH72PRCPD5UPZMJMKIMVOPLTI/\"}, {\"url\": \"https://security.gentoo.org/glsa/202309-17\"}, {\"url\": \"https://security.gentoo.org/glsa/202311-11\"}]}, \"adp\": [{\"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-02T06:33:05.221Z\"}, \"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://chromereleases.googleblog.com/2023/05/stable-channel-update-for-desktop_16.html\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://crbug.com/1435166\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://www.debian.org/security/2023/dsa-5404\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/73XUIHJ6UT75VFPDPLJOXJON7MVIKVZI/\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FXFL4TDAH72PRCPD5UPZMJMKIMVOPLTI/\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://security.gentoo.org/glsa/202309-17\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://security.gentoo.org/glsa/202311-11\", \"tags\": [\"x_transferred\"]}]}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 8.8, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"REQUIRED\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2023-2723\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-04-23T13:28:23.212213Z\"}}}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-416\", \"description\": \"CWE-416 Use After Free\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-05-05T13:05:27.066Z\"}}]}",
"cveMetadata": "{\"cveId\": \"CVE-2023-2723\", \"assignerOrgId\": \"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28\", \"state\": \"PUBLISHED\", \"assignerShortName\": \"Chrome\", \"dateReserved\": \"2023-05-15T21:16:58.172Z\", \"datePublished\": \"2023-05-16T18:45:34.099Z\", \"dateUpdated\": \"2025-05-05T16:00:39.211Z\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
}
}
CERTFR-2023-AVI-0388
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans Google Chrome. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
None| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Google Chrome versions ant\u00e9rieures \u00e0 113.0.5672.126/.127 pour Windows",
"product": {
"name": "Chrome",
"vendor": {
"name": "Google",
"scada": false
}
}
},
{
"description": "Google Chrome versions ant\u00e9rieures \u00e0 113.0.5672.126 pour Mac et Linux",
"product": {
"name": "Chrome",
"vendor": {
"name": "Google",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2023-2724",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-2724"
},
{
"name": "CVE-2023-2726",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-2726"
},
{
"name": "CVE-2023-2721",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-2721"
},
{
"name": "CVE-2023-2722",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-2722"
},
{
"name": "CVE-2023-2725",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-2725"
},
{
"name": "CVE-2023-2723",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-2723"
}
],
"links": [],
"reference": "CERTFR-2023-AVI-0388",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2023-05-17T00:00:00.000000"
}
],
"risks": [
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Google Chrome.\nElles permettent \u00e0 un attaquant de provoquer un probl\u00e8me de s\u00e9curit\u00e9 non\nsp\u00e9cifi\u00e9 par l\u0027\u00e9diteur.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Google Chrome",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Google Chrome du 16 mai 2023",
"url": "https://chromereleases.googleblog.com/2023/05/stable-channel-update-for-desktop_16.html"
}
]
}
CERTFR-2023-AVI-0396
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans Microsoft Edge. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
None| Title | Publication Time | Tags | ||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Microsoft Edge versions \u0027Extended Stable\u0027 ant\u00e9rieures \u00e0 112.0.1722.84",
"product": {
"name": "Edge",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Edge versions \u0027Stable\u0027 ant\u00e9rieures \u00e0 113.0.1774.50",
"product": {
"name": "Edge",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2023-2724",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-2724"
},
{
"name": "CVE-2023-2726",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-2726"
},
{
"name": "CVE-2023-2721",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-2721"
},
{
"name": "CVE-2023-2722",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-2722"
},
{
"name": "CVE-2023-2725",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-2725"
},
{
"name": "CVE-2023-2723",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-2723"
}
],
"links": [],
"reference": "CERTFR-2023-AVI-0396",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2023-05-19T00:00:00.000000"
}
],
"risks": [
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Microsoft Edge.\nElles permettent \u00e0 un attaquant de provoquer un probl\u00e8me de s\u00e9curit\u00e9 non\nsp\u00e9cifi\u00e9 par l\u0027\u00e9diteur.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Microsoft Edge",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2023-2724 du 18 mai 2023",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-2724"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2023-2726 du 18 mai 2023",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-2726"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2023-2721 du 18 mai 2023",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-2721"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2023-2723 du 18 mai 2023",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-2723"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2023-2725 du 18 mai 2023",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-2725"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2023-2722 du 18 mai 2023",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-2722"
}
]
}
CERTFR-2023-AVI-0388
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans Google Chrome. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
None| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Google Chrome versions ant\u00e9rieures \u00e0 113.0.5672.126/.127 pour Windows",
"product": {
"name": "Chrome",
"vendor": {
"name": "Google",
"scada": false
}
}
},
{
"description": "Google Chrome versions ant\u00e9rieures \u00e0 113.0.5672.126 pour Mac et Linux",
"product": {
"name": "Chrome",
"vendor": {
"name": "Google",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2023-2724",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-2724"
},
{
"name": "CVE-2023-2726",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-2726"
},
{
"name": "CVE-2023-2721",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-2721"
},
{
"name": "CVE-2023-2722",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-2722"
},
{
"name": "CVE-2023-2725",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-2725"
},
{
"name": "CVE-2023-2723",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-2723"
}
],
"links": [],
"reference": "CERTFR-2023-AVI-0388",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2023-05-17T00:00:00.000000"
}
],
"risks": [
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Google Chrome.\nElles permettent \u00e0 un attaquant de provoquer un probl\u00e8me de s\u00e9curit\u00e9 non\nsp\u00e9cifi\u00e9 par l\u0027\u00e9diteur.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Google Chrome",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Google Chrome du 16 mai 2023",
"url": "https://chromereleases.googleblog.com/2023/05/stable-channel-update-for-desktop_16.html"
}
]
}
CERTFR-2023-AVI-0396
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans Microsoft Edge. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
None| Title | Publication Time | Tags | ||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Microsoft Edge versions \u0027Extended Stable\u0027 ant\u00e9rieures \u00e0 112.0.1722.84",
"product": {
"name": "Edge",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Edge versions \u0027Stable\u0027 ant\u00e9rieures \u00e0 113.0.1774.50",
"product": {
"name": "Edge",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2023-2724",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-2724"
},
{
"name": "CVE-2023-2726",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-2726"
},
{
"name": "CVE-2023-2721",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-2721"
},
{
"name": "CVE-2023-2722",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-2722"
},
{
"name": "CVE-2023-2725",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-2725"
},
{
"name": "CVE-2023-2723",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-2723"
}
],
"links": [],
"reference": "CERTFR-2023-AVI-0396",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2023-05-19T00:00:00.000000"
}
],
"risks": [
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Microsoft Edge.\nElles permettent \u00e0 un attaquant de provoquer un probl\u00e8me de s\u00e9curit\u00e9 non\nsp\u00e9cifi\u00e9 par l\u0027\u00e9diteur.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Microsoft Edge",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2023-2724 du 18 mai 2023",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-2724"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2023-2726 du 18 mai 2023",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-2726"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2023-2721 du 18 mai 2023",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-2721"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2023-2723 du 18 mai 2023",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-2723"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2023-2725 du 18 mai 2023",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-2725"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2023-2722 du 18 mai 2023",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-2722"
}
]
}
BDU:2023-03805
Vulnerability from fstec - Published: 16.05.2023{
"CVSS 2.0": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"CVSS 3.0": "AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"CVSS 4.0": null,
"remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
"remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
"\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u041e\u041e\u041e \u00ab\u0420\u0443\u0441\u0411\u0418\u0422\u0435\u0445-\u0410\u0441\u0442\u0440\u0430\u00bb, \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f, Fedora Project, Google Inc, \u0410\u041e \"\u041d\u041f\u041f\u041a\u0422\"",
"\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "1.6 \u00ab\u0421\u043c\u043e\u043b\u0435\u043d\u0441\u043a\u00bb (Astra Linux Special Edition), 10 (Debian GNU/Linux), 11 (Debian GNU/Linux), 1.7 (Astra Linux Special Edition), 37 (Fedora), 4.7 (Astra Linux Special Edition), 38 (Fedora), \u0434\u043e 113.0.5672.126 (Google Chrome), \u0434\u043e 113.0.5672.127 (Google Chrome), \u0434\u043e 2.8 (\u041e\u0421\u041e\u041d \u041e\u0421\u043d\u043e\u0432\u0430 \u041enyx)",
"\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0438\u0437 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u0432.\n\u0412 \u0441\u0432\u044f\u0437\u0438 \u0441\u043e \u0441\u043b\u043e\u0436\u0438\u0432\u0448\u0435\u0439\u0441\u044f \u043e\u0431\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u043e\u0439 \u0438 \u0432\u0432\u0435\u0434\u0435\u043d\u043d\u044b\u043c\u0438 \u0441\u0430\u043d\u043a\u0446\u0438\u044f\u043c\u0438 \u043f\u0440\u043e\u0442\u0438\u0432 \u0420\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u043e\u0439 \u0424\u0435\u0434\u0435\u0440\u0430\u0446\u0438\u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u0441\u043b\u0435 \u043e\u0446\u0435\u043d\u043a\u0438 \u0432\u0441\u0435\u0445 \u0441\u043e\u043f\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u0440\u0438\u0441\u043a\u043e\u0432.\n\n\u041a\u043e\u043c\u043f\u0435\u043d\u0441\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b:\n- \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u044b \u0441 \u0444\u0443\u043d\u043a\u0446\u0438\u0435\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0432\u0435\u0431-\u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c;\n- \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0432 \u0441\u0435\u0442\u044c \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u2013 \u0440\u0435\u0433\u043b\u0430\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u044f \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432 \u0438 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439;\n- \u0437\u0430\u043f\u0443\u0441\u043a \u0432\u0435\u0431-\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441 \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0432 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435;\n- \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0432\u0435\u0431-\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432;\n- \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0438 \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0432\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u0439.\n\n\u0414\u043b\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Google Inc.:\nhttps://chromereleases.googleblog.com/2023/05/stable-channel-update-for-desktop_16.html\n\n\u0414\u043b\u044f Debian GNU/Linux:\nhttps://www.debian.org/security/2023/dsa-5404\n\n\u0414\u043b\u044f Fedora:\nhttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/73XUIHJ6UT75VFPDPLJOXJON7MVIKVZI/ \nhttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FXFL4TDAH72PRCPD5UPZMJMKIMVOPLTI/\n\n\u0414\u043b\u044f \u041e\u0421 Astra Linux:\n\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f: https://wiki.astralinux.ru/astra-linux-se17-bulletin-2023-0630SE17MD\n\n\u0414\u043b\u044f \u041e\u0421\u041e\u041d \u041e\u0421\u043d\u043e\u0432\u0430 \u041enyx:\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f chromium \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 115.0.5790.98+repack-1~deb11u1.osnova1\n\n\u0414\u043b\u044f \u041e\u0421 Astra Linux Special Edition \u0434\u043b\u044f \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b ARM 4.7:\n\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f: https://wiki.astralinux.ru/astra-linux-se47-bulletin-2023-0907SE47\n\n\u0414\u043b\u044f Astra Linux 1.6 \u00ab\u0421\u043c\u043e\u043b\u0435\u043d\u0441\u043a\u00bb:\n\u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u0430\u043a\u0435\u0442 chromium \u0434\u043e 1:119.0.6045.199-0astragost0+ci202311302128+astra6 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f: https://wiki.astralinux.ru/astra-linux-se16-bulletin-20231214SE16",
"\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "16.05.2023",
"\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "26.12.2023",
"\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "20.07.2023",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2023-03805",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2023-2723",
"\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
"\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
"\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Astra Linux Special Edition (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u2116369), Debian GNU/Linux, Fedora, Google Chrome, \u041e\u0421\u041e\u041d \u041e\u0421\u043d\u043e\u0432\u0430 \u041enyx (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21165913)",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "\u041e\u041e\u041e \u00ab\u0420\u0443\u0441\u0411\u0418\u0422\u0435\u0445-\u0410\u0441\u0442\u0440\u0430\u00bb Astra Linux Special Edition 1.6 \u00ab\u0421\u043c\u043e\u043b\u0435\u043d\u0441\u043a\u00bb (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u2116369), \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Debian GNU/Linux 10 , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Debian GNU/Linux 11 , \u041e\u041e\u041e \u00ab\u0420\u0443\u0441\u0411\u0418\u0422\u0435\u0445-\u0410\u0441\u0442\u0440\u0430\u00bb Astra Linux Special Edition 1.7 (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u2116369), Fedora Project Fedora 37 , \u041e\u041e\u041e \u00ab\u0420\u0443\u0441\u0411\u0418\u0422\u0435\u0445-\u0410\u0441\u0442\u0440\u0430\u00bb Astra Linux Special Edition 4.7 ARM (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u2116369), Fedora Project Fedora 38 , \u0410\u041e \"\u041d\u041f\u041f\u041a\u0422\" \u041e\u0421\u041e\u041d \u041e\u0421\u043d\u043e\u0432\u0430 \u041enyx \u0434\u043e 2.8 (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21165913)",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0430\u0431\u043e\u0440\u0430 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0434\u043b\u044f \u0432\u0435\u0431-\u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 DevTools \u0432\u0435\u0431-\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Google Chrome, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c, \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u0438\u0445 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438",
"\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f (CWE-416)",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0430\u0431\u043e\u0440\u0430 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0434\u043b\u044f \u0432\u0435\u0431-\u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 DevTools \u0432\u0435\u0431-\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Google Chrome \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u043e\u0441\u043b\u0435 \u0435\u0451 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c, \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u0438\u0445 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0439 HTML \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b",
"\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
"\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
"\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
"\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://chromereleases.googleblog.com/2023/05/stable-channel-update-for-desktop16.html \nhttps://nvd.nist.gov/vuln/detail/CVE-2023-2723 \nhttps://crbug.com/1435166\nhttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/73XUIHJ6UT75VFPDPLJOXJON7MVIKVZI/ \nhttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FXFL4TDAH72PRCPD5UPZMJMKIMVOPLTI/ \nhttps://www.debian.org/security/2023/dsa-5404\nhttps://wiki.astralinux.ru/astra-linux-se17-bulletin-2023-0630SE17MD\nhttps://\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430.\u043d\u043f\u043f\u043a\u0442.\u0440\u0444/bin/view/\u041e\u0421\u043d\u043e\u0432\u0430/\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f/2.8/\nhttps://wiki.astralinux.ru/astra-linux-se47-bulletin-2023-0907SE47\nhttps://wiki.astralinux.ru/astra-linux-se16-bulletin-20231214SE16",
"\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
"\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430, \u041f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u0435 \u041f\u041e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c",
"\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-416",
"\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 10)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 8,8)"
}
CNVD-2023-43874
Vulnerability from cnvd - Published: 2023-05-26厂商已发布了漏洞修复程序,请及时关注更新: https://chromereleases.googleblog.com/2023/05/stable-channel-update-for-desktop_16.html
| Name | Google Chrome <113.0.5672.126 |
|---|
{
"cves": {
"cve": {
"cveNumber": "CVE-2023-2723",
"cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2023-2723"
}
},
"description": "Google Chrome\u662f\u7f8e\u56fd\u8c37\u6b4c\uff08Google\uff09\u516c\u53f8\u7684\u4e00\u6b3eWeb\u6d4f\u89c8\u5668\u3002\n\nGoogle Chrome 113.0.5672.126\u4e4b\u524d\u7248\u672c\u5b58\u5728\u5185\u5b58\u9519\u8bef\u5f15\u7528\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8eDevTools\u8d1f\u8d23\u91ca\u653e\u5185\u5b58\u7684\u6307\u4ee4\u53d1\u751f\u6df7\u4e71\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u901a\u8fc7\u7cbe\u5fc3\u5236\u4f5c\u7684HTML\u9875\u9762\u6f5c\u5728\u5730\u5229\u7528\u5806\u635f\u574f\u3002",
"formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://chromereleases.googleblog.com/2023/05/stable-channel-update-for-desktop_16.html",
"isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
"number": "CNVD-2023-43874",
"openTime": "2023-05-26",
"patchDescription": "Google Chrome\u662f\u7f8e\u56fd\u8c37\u6b4c\uff08Google\uff09\u516c\u53f8\u7684\u4e00\u6b3eWeb\u6d4f\u89c8\u5668\u3002\r\n\r\nGoogle Chrome 113.0.5672.126\u4e4b\u524d\u7248\u672c\u5b58\u5728\u5185\u5b58\u9519\u8bef\u5f15\u7528\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8eDevTools\u8d1f\u8d23\u91ca\u653e\u5185\u5b58\u7684\u6307\u4ee4\u53d1\u751f\u6df7\u4e71\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u901a\u8fc7\u7cbe\u5fc3\u5236\u4f5c\u7684HTML\u9875\u9762\u6f5c\u5728\u5730\u5229\u7528\u5806\u635f\u574f\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
"patchName": "Google Chrome DevTools\u5185\u5b58\u9519\u8bef\u5f15\u7528\u6f0f\u6d1e\uff08CNVD-2023-43874\uff09\u7684\u8865\u4e01",
"products": {
"product": "Google Chrome \u003c113.0.5672.126"
},
"referenceLink": "https://crbug.com/1435166",
"serverity": "\u9ad8",
"submitTime": "2023-05-18",
"title": "Google Chrome DevTools\u5185\u5b58\u9519\u8bef\u5f15\u7528\u6f0f\u6d1e\uff08CNVD-2023-43874\uff09"
}
FKIE_CVE-2023-2723
Vulnerability from fkie_nvd - Published: 2023-05-16 19:15 - Updated: 2025-05-05 16:158.8 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
| Vendor | Product | Version | |
|---|---|---|---|
| chrome | * | ||
| debian | debian_linux | 11.0 | |
| fedoraproject | fedora | 37 | |
| fedoraproject | fedora | 38 |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
"matchCriteriaId": "43A84E9E-131C-4DA1-B09E-0BFC1E3D8846",
"versionEndExcluding": "113.0.5672.126",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
"matchCriteriaId": "FA6FEEC2-9F11-4643-8827-749718254FED",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
"matchCriteriaId": "E30D0E6F-4AE8-4284-8716-991DFA48CC5D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",
"matchCriteriaId": "CC559B26-5DFC-4B7A-A27C-B77DE755DFF9",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Use after free in DevTools in Google Chrome prior to 113.0.5672.126 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)"
}
],
"id": "CVE-2023-2723",
"lastModified": "2025-05-05T16:15:36.180",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9,
"source": "nvd@nist.gov",
"type": "Primary"
},
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9,
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary"
}
]
},
"published": "2023-05-16T19:15:09.277",
"references": [
{
"source": "chrome-cve-admin@google.com",
"tags": [
"Release Notes"
],
"url": "https://chromereleases.googleblog.com/2023/05/stable-channel-update-for-desktop_16.html"
},
{
"source": "chrome-cve-admin@google.com",
"tags": [
"Permissions Required"
],
"url": "https://crbug.com/1435166"
},
{
"source": "chrome-cve-admin@google.com",
"tags": [
"Mailing List"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/73XUIHJ6UT75VFPDPLJOXJON7MVIKVZI/"
},
{
"source": "chrome-cve-admin@google.com",
"tags": [
"Mailing List"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FXFL4TDAH72PRCPD5UPZMJMKIMVOPLTI/"
},
{
"source": "chrome-cve-admin@google.com",
"tags": [
"Third Party Advisory"
],
"url": "https://security.gentoo.org/glsa/202309-17"
},
{
"source": "chrome-cve-admin@google.com",
"url": "https://security.gentoo.org/glsa/202311-11"
},
{
"source": "chrome-cve-admin@google.com",
"tags": [
"Third Party Advisory"
],
"url": "https://www.debian.org/security/2023/dsa-5404"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Release Notes"
],
"url": "https://chromereleases.googleblog.com/2023/05/stable-channel-update-for-desktop_16.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Permissions Required"
],
"url": "https://crbug.com/1435166"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/73XUIHJ6UT75VFPDPLJOXJON7MVIKVZI/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FXFL4TDAH72PRCPD5UPZMJMKIMVOPLTI/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://security.gentoo.org/glsa/202309-17"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://security.gentoo.org/glsa/202311-11"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://www.debian.org/security/2023/dsa-5404"
}
],
"sourceIdentifier": "chrome-cve-admin@google.com",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-416"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
},
{
"description": [
{
"lang": "en",
"value": "CWE-416"
}
],
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary"
}
]
}
GHSA-7797-6FVM-V8XW
Vulnerability from github – Published: 2023-05-16 21:30 – Updated: 2025-05-05 18:32Use after free in DevTools in Google Chrome prior to 113.0.5672.126 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
{
"affected": [],
"aliases": [
"CVE-2023-2723"
],
"database_specific": {
"cwe_ids": [
"CWE-416"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2023-05-16T19:15:09Z",
"severity": "HIGH"
},
"details": "Use after free in DevTools in Google Chrome prior to 113.0.5672.126 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"id": "GHSA-7797-6fvm-v8xw",
"modified": "2025-05-05T18:32:39Z",
"published": "2023-05-16T21:30:22Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-2723"
},
{
"type": "WEB",
"url": "https://chromereleases.googleblog.com/2023/05/stable-channel-update-for-desktop_16.html"
},
{
"type": "WEB",
"url": "https://crbug.com/1435166"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/73XUIHJ6UT75VFPDPLJOXJON7MVIKVZI"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FXFL4TDAH72PRCPD5UPZMJMKIMVOPLTI"
},
{
"type": "WEB",
"url": "https://security.gentoo.org/glsa/202309-17"
},
{
"type": "WEB",
"url": "https://security.gentoo.org/glsa/202311-11"
},
{
"type": "WEB",
"url": "https://www.debian.org/security/2023/dsa-5404"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
}
]
}
GSD-2023-2723
Vulnerability from gsd - Updated: 2023-12-13 01:20{
"GSD": {
"alias": "CVE-2023-2723",
"id": "GSD-2023-2723"
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2023-2723"
],
"details": "Use after free in DevTools in Google Chrome prior to 113.0.5672.126 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"id": "GSD-2023-2723",
"modified": "2023-12-13T01:20:32.535100Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "chrome-cve-admin@google.com",
"ID": "CVE-2023-2723",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Chrome",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_name": "113.0.5672.126",
"version_value": "113.0.5672.126"
}
]
}
}
]
},
"vendor_name": "Google"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Use after free in DevTools in Google Chrome prior to 113.0.5672.126 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)"
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Use after free"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://chromereleases.googleblog.com/2023/05/stable-channel-update-for-desktop_16.html",
"refsource": "MISC",
"url": "https://chromereleases.googleblog.com/2023/05/stable-channel-update-for-desktop_16.html"
},
{
"name": "https://crbug.com/1435166",
"refsource": "MISC",
"url": "https://crbug.com/1435166"
},
{
"name": "https://www.debian.org/security/2023/dsa-5404",
"refsource": "MISC",
"url": "https://www.debian.org/security/2023/dsa-5404"
},
{
"name": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/73XUIHJ6UT75VFPDPLJOXJON7MVIKVZI/",
"refsource": "MISC",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/73XUIHJ6UT75VFPDPLJOXJON7MVIKVZI/"
},
{
"name": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FXFL4TDAH72PRCPD5UPZMJMKIMVOPLTI/",
"refsource": "MISC",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FXFL4TDAH72PRCPD5UPZMJMKIMVOPLTI/"
},
{
"name": "https://security.gentoo.org/glsa/202309-17",
"refsource": "MISC",
"url": "https://security.gentoo.org/glsa/202309-17"
},
{
"name": "https://security.gentoo.org/glsa/202311-11",
"refsource": "MISC",
"url": "https://security.gentoo.org/glsa/202311-11"
}
]
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "113.0.5672.126",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "chrome-cve-admin@google.com",
"ID": "CVE-2023-2723"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "Use after free in DevTools in Google Chrome prior to 113.0.5672.126 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)"
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "CWE-416"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://crbug.com/1435166",
"refsource": "MISC",
"tags": [
"Permissions Required"
],
"url": "https://crbug.com/1435166"
},
{
"name": "https://chromereleases.googleblog.com/2023/05/stable-channel-update-for-desktop_16.html",
"refsource": "MISC",
"tags": [
"Release Notes"
],
"url": "https://chromereleases.googleblog.com/2023/05/stable-channel-update-for-desktop_16.html"
},
{
"name": "https://www.debian.org/security/2023/dsa-5404",
"refsource": "MISC",
"tags": [
"Third Party Advisory"
],
"url": "https://www.debian.org/security/2023/dsa-5404"
},
{
"name": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/73XUIHJ6UT75VFPDPLJOXJON7MVIKVZI/",
"refsource": "MISC",
"tags": [
"Mailing List"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/73XUIHJ6UT75VFPDPLJOXJON7MVIKVZI/"
},
{
"name": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FXFL4TDAH72PRCPD5UPZMJMKIMVOPLTI/",
"refsource": "MISC",
"tags": [
"Mailing List"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FXFL4TDAH72PRCPD5UPZMJMKIMVOPLTI/"
},
{
"name": "https://security.gentoo.org/glsa/202309-17",
"refsource": "MISC",
"tags": [
"Third Party Advisory"
],
"url": "https://security.gentoo.org/glsa/202309-17"
},
{
"name": "https://security.gentoo.org/glsa/202311-11",
"refsource": "",
"tags": [],
"url": "https://security.gentoo.org/glsa/202311-11"
}
]
}
},
"impact": {
"baseMetricV3": {
"cvssV3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
}
},
"lastModifiedDate": "2023-11-25T11:15Z",
"publishedDate": "2023-05-16T19:15Z"
}
}
}
OPENSUSE-SU-2023:0114-1
Vulnerability from csaf_opensuse - Published: 2023-05-27 12:01 - Updated: 2023-05-27 12:01| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64 | — |
Vendor Fix
|
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for opera",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for opera fixes the following issues:\n\n- Update to 99.0.4788.13\n * CHR-9290 Update Chromium on desktop-stable-113-4788 to\n 113.0.5672.127\n * DNA-107317 __delayLoadHelper2 crash in crashreporter\n- The update to chromium 113.0.5672.127 fixes following issues:\n CVE-2023-2721, CVE-2023-2722, CVE-2023-2723, CVE-2023-2724,\n CVE-2023-2725, CVE-2023-2726\n\n- Update to 99.0.4788.9\n * CHR-9283 Update Chromium on desktop-stable-113-4788 to\n 113.0.5672.93\n * DNA-107638 Translations for O99\n * DNA-107678 Crash Report [@ BrowserContextKeyedServiceFactory::\n BrowserContextKeyedServiceFactory(char const*,\n BrowserContextDependencyManager*) ]\n * DNA-107795 Fix wrong german translation of\n \u0027Close All Duplicate Tabs\u0027\n * DNA-107800 Fonts on section#folder and AddSitePanel not\n readable when animated wallpaper chosen\n * DNA-107840 Promote O99 to stable\n\n- Update to 98.0.4759.39\n * DNA-102363 ChromeFileSystemAccessPermissionContextTest.\n ConfirmSensitiveEntryAccess_DangerousFile fails\n * DNA-105534 [Add to Opera] Incorrect scroll on modal when\n browser window size is too small\n * DNA-106649 Opening new tab when pinned tab is active gives\n 2 active tabs\n * DNA-107226 Speed Dial freezes and empty space remains after\n Continue booking tile dragging\n * DNA-107435 Building archive_source_release target fails\n * DNA-107441 [Start page] Right mouse click on tile in continue\n on section opens target site in current tab\n * DNA-107508 Crash at permissions::PermissionRecoverySuccessRate\n Tracker::TrackUsage(ContentSettingsType)\n * DNA-107528 Handle real-time SD impression reporting\n * DNA-107546 Context menus broken with one workspace\n * DNA-107548 Paste from Context Menu doesn\u2019t work for Search\n on StartPage\n * DNA-107560 Optimize real-time SD impression reporting\n\n- Update to 98.0.4759.15\n * CHR-9259 Update Chromium on desktop-stable-112-4759 to\n 112.0.5615.121\n * CHR-9264 Update Chromium on desktop-stable-112-4759 to\n 112.0.5615.165\n * DNA-104949 Cleanup reauthorizer and permission\n * DNA-106748 Presubmit problems\n * DNA-107262 Delete faulty translations\n- The update to chromium 112.0.5615.165 fixes following issues:\n CVE-2023-2133, CVE-2023-2134, CVE-2023-2135, CVE-2023-2136,\n CVE-2023-2137\n- Changes in 98.0.4759.6\n * CHR-9255 Update Chromium on desktop-stable-112-4759 to\n 112.0.5615.87\n * DNA-106342 Crash when blocking cookies in sidebar \n web.infobars::InfoBarManager::AddInfoBar(std::Cr::unique_ptr, bool)\n * DNA-107054 Apply patch for CVE-2023-2033\n * DNA-107141 Promote O98 to stable\n * DNA-107142 Translations for O98\n\n- Update to 97.0.4719.83\n * DNA-106342 Crash when blocking cookies in sidebar web.\n infobars::InfoBarManager::AddInfoBar(std::Cr::unique_ptr, bool)\n * DNA-106550 [SD][Drag\u0026Drop] Create a static manual layout for\n speed dials\n * DNA-106791 Run smoketests on mac arm builds\n * DNA-107054 Apply patch for CVE-2023-2033\n- Remove setup_repo.sh, fix non-executable-script rpmlint warning\n and we do not want create a repo\n\n- Update to 97.0.4719.63\n * CHR-9245 Update Chromium on desktop-stable-111-4719 to\n 111.0.5563.147\n * DNA-105919 Set new Baidu search string\n * DNA-106168 EasySetup update\n\n- Update to 97.0.4719.43\n * CHR-9236 Update Chromium on desktop-stable-111-4719 to\n 111.0.5563.111\n * DNA-105141 Tabs to the right of the currently active one swap\n their position with another when clicked\n * DNA-106044 Translations for O97\n * DNA-106300 Fix rule for generating archive_browser_sym_files\n on crossplatform builds\n * DNA-106412 Content of popup not generated for some extensions\n when using more then one worksapce\n * DNA-106433 Extend Easy Setup API\n * DNA-106435 Increase timeout for the welcome page\n * DNA-106453 Public build from desktop-stable-111-4719 do\n not compile\n- The update to chromium 111.0.5563.111 fixes following issues:\n CVE-2023-1528, CVE-2023-1529, CVE-2023-1530, CVE-2023-1531,\n CVE-2023-1532, CVE-2023-1533, CVE-2023-1534\n\n- Update to 97.0.4719.28\n * DNA-106303 Extension should get proper parent window id from\n the sidebar API\n * DNA-106366 Opera crypto crashes on startup during session\n restore\n- Changes in 97.0.4719.26\n * CHR-9225 Update Chromium on desktop-stable-111-4719 to\n 111.0.5563.65\n * DNA-102778 Goth reports error for utils_api test\n * DNA-104983 Missing encryption option in sync settings\n * DNA-105293 add RateMe feature to Speed Dials and Suggested\n Speed Dials section\n * DNA-105299 Opera crash when closing tab by middle mouse button\n * DNA-105712 Update linux sandbox dependency for browsertests\n * DNA-105787 Settings extended with the AI section\n * DNA-105865 Add reload option for panels in\n opr.browserSidebarPrivate namespace\n * DNA-105944 Update checking of widevine certificate expiration\n to be independent from dateformat\n * DNA-105959 Update texts \u2013 native part\n * DNA-105961 Import translated texts \u2013 native part\n * DNA-105967 Crash at\n base::ObserverList::RemoveObserver(PrefObserver const*)\n * DNA-105973 Turn on #tab-tooltip-close-tabs on all streams\n * DNA-106061 Hide extension popup\n * DNA-106062 [Stable A/B Test] React Start Page for Austria,\n Italy, Spain and France 50%\n * DNA-106068 Extension shows if developer mode is enabled\n * DNA-106070 Feedback window for highlight popup displayed in\n wrong place\n * DNA-106079 EasySetup Disclaimer \u2013 Reduce size\n * DNA-106085 Crash at\n TabHoverCardController::OnViewIsDeleting(views::View*)\n * DNA-106086 Player home page does not show images in dark mode\n * DNA-106096 Increase prompt window in AB width\n * DNA-106109 Teasers on start page don\u2019t show transparency\n * DNA-106114 AI Prompts button is after Reader Mode icon\n * DNA-106168 EasySetup update\n * DNA-106212 Promote O97 to stable\n * DNA-106225 Enable #shodan-extension for all streams\n * DNA-106229 Update J5 texts\n- The update to chromium 111.0.5563.65 fixes following issues:\n CVE-2023-1213, CVE-2023-1214, CVE-2023-1215, CVE-2023-1216,\n CVE-2023-1217, CVE-2023-1218, CVE-2023-1219, CVE-2023-1220,\n CVE-2023-1221, CVE-2023-1222, CVE-2023-1223, CVE-2023-1224,\n CVE-2023-1225, CVE-2023-1226, CVE-2023-1227, CVE-2023-1228,\n CVE-2023-1229, CVE-2023-1230, CVE-2023-1231, CVE-2023-1232,\n CVE-2023-1233, CVE-2023-1234, CVE-2023-1235, CVE-2023-1236\n\n- Update to 96.0.4693.80\n * CHR-9221 Update Chromium on desktop-stable-110-4693 to\n 110.0.5481.192\n * DNA-104501 Opera don\u2019t work with\n #high-efficiency-mode-available flag\n * DNA-105860 Enable #google-suggest-entities on all streams\n * DNA-106062 [Stable A/B Test] React Start Page for Austria,\n Italy, Spain and France 50%\n\n- Update to 96.0.4693.50\n * DNA-104420 Creating mechanism to detect specific shortcut\n * DNA-104742 Wrong button place in opera tools section in\n sidebar menu\n * DNA-105141 Tabs to the right of the currently active one swap\n their position with another when clicked\n * DNA-105426 Add provisioning profiles during builds signing\n * DNA-105506 Replace all references to opera-api.com domain\n with opera-api2.com\n * DNA-105536 Enable kFeatureExtendedUnstoppableDomains\n for desktop\n * DNA-105727 [Rich Hints] Screenshot event must not collide with\n native PrtScr notification.\n * DNA-105740 [Rich Hints] Add event_user_survey to the whitelist\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-2023-114",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2023_0114-1.json"
},
{
"category": "self",
"summary": "URL for openSUSE-SU-2023:0114-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AOK6KL3HWOEESQP5YYTJH4ANDT2XMQRU/"
},
{
"category": "self",
"summary": "E-Mail link for openSUSE-SU-2023:0114-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AOK6KL3HWOEESQP5YYTJH4ANDT2XMQRU/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1213 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1213/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1214 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1214/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1215 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1215/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1216 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1216/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1217 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1217/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1218 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1218/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1219 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1219/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1220 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1220/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1221 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1221/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1222 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1222/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1223 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1223/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1224 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1224/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1225 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1225/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1226 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1226/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1227 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1227/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1228 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1228/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1229 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1229/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1230 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1230/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1231 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1231/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1232 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1232/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1233 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1233/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1234 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1234/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1235 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1235/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1236 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1236/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1528 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1528/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1529 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1529/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1530 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1530/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1531 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1531/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1532 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1532/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1533 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1533/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1534 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1534/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-2033 page",
"url": "https://www.suse.com/security/cve/CVE-2023-2033/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-2133 page",
"url": "https://www.suse.com/security/cve/CVE-2023-2133/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-2134 page",
"url": "https://www.suse.com/security/cve/CVE-2023-2134/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-2135 page",
"url": "https://www.suse.com/security/cve/CVE-2023-2135/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-2136 page",
"url": "https://www.suse.com/security/cve/CVE-2023-2136/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-2137 page",
"url": "https://www.suse.com/security/cve/CVE-2023-2137/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-2721 page",
"url": "https://www.suse.com/security/cve/CVE-2023-2721/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-2722 page",
"url": "https://www.suse.com/security/cve/CVE-2023-2722/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-2723 page",
"url": "https://www.suse.com/security/cve/CVE-2023-2723/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-2724 page",
"url": "https://www.suse.com/security/cve/CVE-2023-2724/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-2725 page",
"url": "https://www.suse.com/security/cve/CVE-2023-2725/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-2726 page",
"url": "https://www.suse.com/security/cve/CVE-2023-2726/"
}
],
"title": "Security update for opera",
"tracking": {
"current_release_date": "2023-05-27T12:01:46Z",
"generator": {
"date": "2023-05-27T12:01:46Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2023:0114-1",
"initial_release_date": "2023-05-27T12:01:46Z",
"revision_history": [
{
"date": "2023-05-27T12:01:46Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "opera-99.0.4788.13-lp154.2.47.1.x86_64",
"product": {
"name": "opera-99.0.4788.13-lp154.2.47.1.x86_64",
"product_id": "opera-99.0.4788.13-lp154.2.47.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Leap 15.4 NonFree",
"product": {
"name": "openSUSE Leap 15.4 NonFree",
"product_id": "openSUSE Leap 15.4 NonFree",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.4"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "opera-99.0.4788.13-lp154.2.47.1.x86_64 as component of openSUSE Leap 15.4 NonFree",
"product_id": "openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
},
"product_reference": "opera-99.0.4788.13-lp154.2.47.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.4 NonFree"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-1213",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1213"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Swiftshader in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1213",
"url": "https://www.suse.com/security/cve/CVE-2023-1213"
},
{
"category": "external",
"summary": "SUSE Bug 1209040 for CVE-2023-1213",
"url": "https://bugzilla.suse.com/1209040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-05-27T12:01:46Z",
"details": "important"
}
],
"title": "CVE-2023-1213"
},
{
"cve": "CVE-2023-1214",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1214"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in V8 in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1214",
"url": "https://www.suse.com/security/cve/CVE-2023-1214"
},
{
"category": "external",
"summary": "SUSE Bug 1209040 for CVE-2023-1214",
"url": "https://bugzilla.suse.com/1209040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-05-27T12:01:46Z",
"details": "important"
}
],
"title": "CVE-2023-1214"
},
{
"cve": "CVE-2023-1215",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1215"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in CSS in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1215",
"url": "https://www.suse.com/security/cve/CVE-2023-1215"
},
{
"category": "external",
"summary": "SUSE Bug 1209040 for CVE-2023-1215",
"url": "https://bugzilla.suse.com/1209040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-05-27T12:01:46Z",
"details": "important"
}
],
"title": "CVE-2023-1215"
},
{
"cve": "CVE-2023-1216",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1216"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in DevTools in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had convienced the user to engage in direct UI interaction to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1216",
"url": "https://www.suse.com/security/cve/CVE-2023-1216"
},
{
"category": "external",
"summary": "SUSE Bug 1209040 for CVE-2023-1216",
"url": "https://bugzilla.suse.com/1209040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-05-27T12:01:46Z",
"details": "important"
}
],
"title": "CVE-2023-1216"
},
{
"cve": "CVE-2023-1217",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1217"
}
],
"notes": [
{
"category": "general",
"text": "Stack buffer overflow in Crash reporting in Google Chrome on Windows prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1217",
"url": "https://www.suse.com/security/cve/CVE-2023-1217"
},
{
"category": "external",
"summary": "SUSE Bug 1209040 for CVE-2023-1217",
"url": "https://bugzilla.suse.com/1209040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-05-27T12:01:46Z",
"details": "important"
}
],
"title": "CVE-2023-1217"
},
{
"cve": "CVE-2023-1218",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1218"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebRTC in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1218",
"url": "https://www.suse.com/security/cve/CVE-2023-1218"
},
{
"category": "external",
"summary": "SUSE Bug 1209040 for CVE-2023-1218",
"url": "https://bugzilla.suse.com/1209040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-05-27T12:01:46Z",
"details": "important"
}
],
"title": "CVE-2023-1218"
},
{
"cve": "CVE-2023-1219",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1219"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Metrics in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1219",
"url": "https://www.suse.com/security/cve/CVE-2023-1219"
},
{
"category": "external",
"summary": "SUSE Bug 1209040 for CVE-2023-1219",
"url": "https://bugzilla.suse.com/1209040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-05-27T12:01:46Z",
"details": "important"
}
],
"title": "CVE-2023-1219"
},
{
"cve": "CVE-2023-1220",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1220"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in UMA in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1220",
"url": "https://www.suse.com/security/cve/CVE-2023-1220"
},
{
"category": "external",
"summary": "SUSE Bug 1209040 for CVE-2023-1220",
"url": "https://bugzilla.suse.com/1209040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-05-27T12:01:46Z",
"details": "important"
}
],
"title": "CVE-2023-1220"
},
{
"cve": "CVE-2023-1221",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1221"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Extensions API in Google Chrome prior to 111.0.5563.64 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1221",
"url": "https://www.suse.com/security/cve/CVE-2023-1221"
},
{
"category": "external",
"summary": "SUSE Bug 1209040 for CVE-2023-1221",
"url": "https://bugzilla.suse.com/1209040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-05-27T12:01:46Z",
"details": "important"
}
],
"title": "CVE-2023-1221"
},
{
"cve": "CVE-2023-1222",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1222"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Web Audio API in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1222",
"url": "https://www.suse.com/security/cve/CVE-2023-1222"
},
{
"category": "external",
"summary": "SUSE Bug 1209040 for CVE-2023-1222",
"url": "https://bugzilla.suse.com/1209040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-05-27T12:01:46Z",
"details": "important"
}
],
"title": "CVE-2023-1222"
},
{
"cve": "CVE-2023-1223",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1223"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Autofill in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1223",
"url": "https://www.suse.com/security/cve/CVE-2023-1223"
},
{
"category": "external",
"summary": "SUSE Bug 1209040 for CVE-2023-1223",
"url": "https://bugzilla.suse.com/1209040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-05-27T12:01:46Z",
"details": "important"
}
],
"title": "CVE-2023-1223"
},
{
"cve": "CVE-2023-1224",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1224"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Web Payments API in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1224",
"url": "https://www.suse.com/security/cve/CVE-2023-1224"
},
{
"category": "external",
"summary": "SUSE Bug 1209040 for CVE-2023-1224",
"url": "https://bugzilla.suse.com/1209040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-05-27T12:01:46Z",
"details": "important"
}
],
"title": "CVE-2023-1224"
},
{
"cve": "CVE-2023-1225",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1225"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Navigation in Google Chrome on iOS prior to 111.0.5563.64 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1225",
"url": "https://www.suse.com/security/cve/CVE-2023-1225"
},
{
"category": "external",
"summary": "SUSE Bug 1209040 for CVE-2023-1225",
"url": "https://bugzilla.suse.com/1209040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-05-27T12:01:46Z",
"details": "important"
}
],
"title": "CVE-2023-1225"
},
{
"cve": "CVE-2023-1226",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1226"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Web Payments API in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1226",
"url": "https://www.suse.com/security/cve/CVE-2023-1226"
},
{
"category": "external",
"summary": "SUSE Bug 1209040 for CVE-2023-1226",
"url": "https://bugzilla.suse.com/1209040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-05-27T12:01:46Z",
"details": "important"
}
],
"title": "CVE-2023-1226"
},
{
"cve": "CVE-2023-1227",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1227"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Core in Google Chrome on Lacros prior to 111.0.5563.64 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via crafted UI interaction. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1227",
"url": "https://www.suse.com/security/cve/CVE-2023-1227"
},
{
"category": "external",
"summary": "SUSE Bug 1209040 for CVE-2023-1227",
"url": "https://bugzilla.suse.com/1209040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-05-27T12:01:46Z",
"details": "important"
}
],
"title": "CVE-2023-1227"
},
{
"cve": "CVE-2023-1228",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1228"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Intents in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1228",
"url": "https://www.suse.com/security/cve/CVE-2023-1228"
},
{
"category": "external",
"summary": "SUSE Bug 1209040 for CVE-2023-1228",
"url": "https://bugzilla.suse.com/1209040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-05-27T12:01:46Z",
"details": "important"
}
],
"title": "CVE-2023-1228"
},
{
"cve": "CVE-2023-1229",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1229"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Permission prompts in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1229",
"url": "https://www.suse.com/security/cve/CVE-2023-1229"
},
{
"category": "external",
"summary": "SUSE Bug 1209040 for CVE-2023-1229",
"url": "https://bugzilla.suse.com/1209040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-05-27T12:01:46Z",
"details": "important"
}
],
"title": "CVE-2023-1229"
},
{
"cve": "CVE-2023-1230",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1230"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in WebApp Installs in Google Chrome on Android prior to 111.0.5563.64 allowed an attacker who convinced a user to install a malicious WebApp to spoof the contents of the PWA installer via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1230",
"url": "https://www.suse.com/security/cve/CVE-2023-1230"
},
{
"category": "external",
"summary": "SUSE Bug 1209040 for CVE-2023-1230",
"url": "https://bugzilla.suse.com/1209040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-05-27T12:01:46Z",
"details": "important"
}
],
"title": "CVE-2023-1230"
},
{
"cve": "CVE-2023-1231",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1231"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Autofill in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to potentially spoof the contents of the omnibox via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1231",
"url": "https://www.suse.com/security/cve/CVE-2023-1231"
},
{
"category": "external",
"summary": "SUSE Bug 1209040 for CVE-2023-1231",
"url": "https://bugzilla.suse.com/1209040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-05-27T12:01:46Z",
"details": "important"
}
],
"title": "CVE-2023-1231"
},
{
"cve": "CVE-2023-1232",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1232"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Resource Timing in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to obtain potentially sensitive information from API via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1232",
"url": "https://www.suse.com/security/cve/CVE-2023-1232"
},
{
"category": "external",
"summary": "SUSE Bug 1209040 for CVE-2023-1232",
"url": "https://bugzilla.suse.com/1209040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-05-27T12:01:46Z",
"details": "important"
}
],
"title": "CVE-2023-1232"
},
{
"cve": "CVE-2023-1233",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1233"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Resource Timing in Google Chrome prior to 111.0.5563.64 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from API via a crafted Chrome Extension. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1233",
"url": "https://www.suse.com/security/cve/CVE-2023-1233"
},
{
"category": "external",
"summary": "SUSE Bug 1209040 for CVE-2023-1233",
"url": "https://bugzilla.suse.com/1209040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-05-27T12:01:46Z",
"details": "important"
}
],
"title": "CVE-2023-1233"
},
{
"cve": "CVE-2023-1234",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1234"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Intents in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1234",
"url": "https://www.suse.com/security/cve/CVE-2023-1234"
},
{
"category": "external",
"summary": "SUSE Bug 1209040 for CVE-2023-1234",
"url": "https://bugzilla.suse.com/1209040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-05-27T12:01:46Z",
"details": "important"
}
],
"title": "CVE-2023-1234"
},
{
"cve": "CVE-2023-1235",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1235"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in DevTools in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted UI interaction. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1235",
"url": "https://www.suse.com/security/cve/CVE-2023-1235"
},
{
"category": "external",
"summary": "SUSE Bug 1209040 for CVE-2023-1235",
"url": "https://bugzilla.suse.com/1209040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-05-27T12:01:46Z",
"details": "important"
}
],
"title": "CVE-2023-1235"
},
{
"cve": "CVE-2023-1236",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1236"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Internals in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to spoof the origin of an iframe via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1236",
"url": "https://www.suse.com/security/cve/CVE-2023-1236"
},
{
"category": "external",
"summary": "SUSE Bug 1209040 for CVE-2023-1236",
"url": "https://bugzilla.suse.com/1209040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-05-27T12:01:46Z",
"details": "important"
}
],
"title": "CVE-2023-1236"
},
{
"cve": "CVE-2023-1528",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1528"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Passwords in Google Chrome prior to 111.0.5563.110 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1528",
"url": "https://www.suse.com/security/cve/CVE-2023-1528"
},
{
"category": "external",
"summary": "SUSE Bug 1209598 for CVE-2023-1528",
"url": "https://bugzilla.suse.com/1209598"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-05-27T12:01:46Z",
"details": "critical"
}
],
"title": "CVE-2023-1528"
},
{
"cve": "CVE-2023-1529",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1529"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds memory access in WebHID in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploit heap corruption via a malicious HID device. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1529",
"url": "https://www.suse.com/security/cve/CVE-2023-1529"
},
{
"category": "external",
"summary": "SUSE Bug 1209598 for CVE-2023-1529",
"url": "https://bugzilla.suse.com/1209598"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-05-27T12:01:46Z",
"details": "critical"
}
],
"title": "CVE-2023-1529"
},
{
"cve": "CVE-2023-1530",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1530"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in PDF in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1530",
"url": "https://www.suse.com/security/cve/CVE-2023-1530"
},
{
"category": "external",
"summary": "SUSE Bug 1209598 for CVE-2023-1530",
"url": "https://bugzilla.suse.com/1209598"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-05-27T12:01:46Z",
"details": "critical"
}
],
"title": "CVE-2023-1530"
},
{
"cve": "CVE-2023-1531",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1531"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in ANGLE in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1531",
"url": "https://www.suse.com/security/cve/CVE-2023-1531"
},
{
"category": "external",
"summary": "SUSE Bug 1209598 for CVE-2023-1531",
"url": "https://bugzilla.suse.com/1209598"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-05-27T12:01:46Z",
"details": "critical"
}
],
"title": "CVE-2023-1531"
},
{
"cve": "CVE-2023-1532",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1532"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in GPU Video in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1532",
"url": "https://www.suse.com/security/cve/CVE-2023-1532"
},
{
"category": "external",
"summary": "SUSE Bug 1209598 for CVE-2023-1532",
"url": "https://bugzilla.suse.com/1209598"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-05-27T12:01:46Z",
"details": "critical"
}
],
"title": "CVE-2023-1532"
},
{
"cve": "CVE-2023-1533",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1533"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebProtect in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1533",
"url": "https://www.suse.com/security/cve/CVE-2023-1533"
},
{
"category": "external",
"summary": "SUSE Bug 1209598 for CVE-2023-1533",
"url": "https://bugzilla.suse.com/1209598"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-05-27T12:01:46Z",
"details": "critical"
}
],
"title": "CVE-2023-1533"
},
{
"cve": "CVE-2023-1534",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1534"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in ANGLE in Google Chrome prior to 111.0.5563.110 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1534",
"url": "https://www.suse.com/security/cve/CVE-2023-1534"
},
{
"category": "external",
"summary": "SUSE Bug 1209598 for CVE-2023-1534",
"url": "https://bugzilla.suse.com/1209598"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-05-27T12:01:46Z",
"details": "critical"
}
],
"title": "CVE-2023-1534"
},
{
"cve": "CVE-2023-2033",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-2033"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in V8 in Google Chrome prior to 112.0.5615.121 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-2033",
"url": "https://www.suse.com/security/cve/CVE-2023-2033"
},
{
"category": "external",
"summary": "SUSE Bug 1210478 for CVE-2023-2033",
"url": "https://bugzilla.suse.com/1210478"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-05-27T12:01:46Z",
"details": "important"
}
],
"title": "CVE-2023-2033"
},
{
"cve": "CVE-2023-2133",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-2133"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds memory access in Service Worker API in Google Chrome prior to 112.0.5615.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-2133",
"url": "https://www.suse.com/security/cve/CVE-2023-2133"
},
{
"category": "external",
"summary": "SUSE Bug 1210618 for CVE-2023-2133",
"url": "https://bugzilla.suse.com/1210618"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-05-27T12:01:46Z",
"details": "critical"
}
],
"title": "CVE-2023-2133"
},
{
"cve": "CVE-2023-2134",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-2134"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds memory access in Service Worker API in Google Chrome prior to 112.0.5615.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-2134",
"url": "https://www.suse.com/security/cve/CVE-2023-2134"
},
{
"category": "external",
"summary": "SUSE Bug 1210618 for CVE-2023-2134",
"url": "https://bugzilla.suse.com/1210618"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-05-27T12:01:46Z",
"details": "critical"
}
],
"title": "CVE-2023-2134"
},
{
"cve": "CVE-2023-2135",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-2135"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in DevTools in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who convinced a user to enable specific preconditions to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-2135",
"url": "https://www.suse.com/security/cve/CVE-2023-2135"
},
{
"category": "external",
"summary": "SUSE Bug 1210618 for CVE-2023-2135",
"url": "https://bugzilla.suse.com/1210618"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-05-27T12:01:46Z",
"details": "critical"
}
],
"title": "CVE-2023-2135"
},
{
"cve": "CVE-2023-2136",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-2136"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in Skia in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-2136",
"url": "https://www.suse.com/security/cve/CVE-2023-2136"
},
{
"category": "external",
"summary": "SUSE Bug 1210618 for CVE-2023-2136",
"url": "https://bugzilla.suse.com/1210618"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-05-27T12:01:46Z",
"details": "critical"
}
],
"title": "CVE-2023-2136"
},
{
"cve": "CVE-2023-2137",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-2137"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in sqlite in Google Chrome prior to 112.0.5615.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-2137",
"url": "https://www.suse.com/security/cve/CVE-2023-2137"
},
{
"category": "external",
"summary": "SUSE Bug 1210618 for CVE-2023-2137",
"url": "https://bugzilla.suse.com/1210618"
},
{
"category": "external",
"summary": "SUSE Bug 1210660 for CVE-2023-2137",
"url": "https://bugzilla.suse.com/1210660"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-05-27T12:01:46Z",
"details": "important"
}
],
"title": "CVE-2023-2137"
},
{
"cve": "CVE-2023-2721",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-2721"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Navigation in Google Chrome prior to 113.0.5672.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-2721",
"url": "https://www.suse.com/security/cve/CVE-2023-2721"
},
{
"category": "external",
"summary": "SUSE Bug 1211442 for CVE-2023-2721",
"url": "https://bugzilla.suse.com/1211442"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-05-27T12:01:46Z",
"details": "important"
}
],
"title": "CVE-2023-2721"
},
{
"cve": "CVE-2023-2722",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-2722"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Autofill UI in Google Chrome on Android prior to 113.0.5672.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-2722",
"url": "https://www.suse.com/security/cve/CVE-2023-2722"
},
{
"category": "external",
"summary": "SUSE Bug 1211442 for CVE-2023-2722",
"url": "https://bugzilla.suse.com/1211442"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-05-27T12:01:46Z",
"details": "important"
}
],
"title": "CVE-2023-2722"
},
{
"cve": "CVE-2023-2723",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-2723"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in DevTools in Google Chrome prior to 113.0.5672.126 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-2723",
"url": "https://www.suse.com/security/cve/CVE-2023-2723"
},
{
"category": "external",
"summary": "SUSE Bug 1211442 for CVE-2023-2723",
"url": "https://bugzilla.suse.com/1211442"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-05-27T12:01:46Z",
"details": "important"
}
],
"title": "CVE-2023-2723"
},
{
"cve": "CVE-2023-2724",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-2724"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in V8 in Google Chrome prior to 113.0.5672.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-2724",
"url": "https://www.suse.com/security/cve/CVE-2023-2724"
},
{
"category": "external",
"summary": "SUSE Bug 1211442 for CVE-2023-2724",
"url": "https://bugzilla.suse.com/1211442"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-05-27T12:01:46Z",
"details": "important"
}
],
"title": "CVE-2023-2724"
},
{
"cve": "CVE-2023-2725",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-2725"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Guest View in Google Chrome prior to 113.0.5672.126 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-2725",
"url": "https://www.suse.com/security/cve/CVE-2023-2725"
},
{
"category": "external",
"summary": "SUSE Bug 1211442 for CVE-2023-2725",
"url": "https://bugzilla.suse.com/1211442"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-05-27T12:01:46Z",
"details": "important"
}
],
"title": "CVE-2023-2725"
},
{
"cve": "CVE-2023-2726",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-2726"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in WebApp Installs in Google Chrome prior to 113.0.5672.126 allowed an attacker who convinced a user to install a malicious web app to bypass install dialog via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-2726",
"url": "https://www.suse.com/security/cve/CVE-2023-2726"
},
{
"category": "external",
"summary": "SUSE Bug 1211442 for CVE-2023-2726",
"url": "https://bugzilla.suse.com/1211442"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-05-27T12:01:46Z",
"details": "important"
}
],
"title": "CVE-2023-2726"
}
]
}
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.