VDB
CVE-2023-1818
CVE-2023-1818
PUBLISHED
In Google Chrome und Microsoft Edge existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem aufgrund von Pufferüberläufen, Use-after-free-Fehlern, unangemessenen Implementierungen und Out-of-Bounds-Reads. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen, Sicherheitsmaßnahmen zu umgehen und Informationen falsch darzustellen. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion.
EPSS 0.70% · 72.4th percentile
Risk Scores
EPSS Score
0.70%
72.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Fedora | Fedora Linux | |
| Ubuntu | Ubuntu Linux | |
| Gentoo | Gentoo Linux | |
| Debian | Debian Linux |
Exploit Intelligence
- https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop.html (circl)
- https://crbug.com/1417325 (circl)
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/ (circl)
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/ (circl)
- https://www.debian.org/security/2023/dsa-5386 (circl)
- https://security.gentoo.org/glsa/202309-17 (circl)
- cvrf.go (github-poc)
- cvrf.go (github-poc)
- cvrf.go (github-poc)
- cvrf.go (github-poc)
…and 2 more exploits
Timeline
- Apr 4, 2023 CVE Published
- Apr 5, 2023 EPSS Score
- May 13, 2023 EPSS Score
- Jun 20, 2023 EPSS Score
- Sep 4, 2023 EPSS Score
- Oct 12, 2023 EPSS Score
- Nov 19, 2023 EPSS Score
- Dec 27, 2023 EPSS Score
- Feb 3, 2024 EPSS Score
- Mar 12, 2024 EPSS Score
- May 27, 2024 EPSS Score
- Jul 4, 2024 EPSS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-0859.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-0859 advisory
- https://security.gentoo.org/glsa/202309-17 advisory
- https://ubuntu.com/security/notices/USN-6021-1 advisory
- https://lists.debian.org/debian-security-announce/2023/msg00076.html advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-8c1df52e87 advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-2023-78e350cb88 advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-2023-c93631749b advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-2023-f07892dd59 advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-4821639cb4 advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-7573786f98 advisory
- https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security advisory
- https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop.html advisory