VDB
CVE-2023-2133
CVE-2023-2133
PUBLISHED
Es existieren mehrere Schwachstellen in Google Chrome und Microsoft Edge. Betroffen sind die Komponenten Service Worker API, DevTools, Skia und Sqlite aufgrund von Out-of-Bounds-Speicherzugriffen, Überläufen und einem Use-after-free-Fehler. Ein entfernter, anonymer Angreifer kann diese Schwachstellen zur Ausführung von beliebigem Code ausnutzen. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion.
EPSS 0.68% · 72.0th percentile
Risk Scores
EPSS Score
0.68%
72.0th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian | Debian Linux | |
| Fedora | Fedora Linux | |
| SUSE | SUSE Linux | |
| Gentoo | Gentoo Linux | |
| Microsoft | Microsoft Edge < 112.0.1722.58 | |
| Microsoft | Microsoft Edge < 109.0.1518.100 |
Exploit Intelligence
- CIRCL published-proof-of-concept: CVE-2023-2133 (circl-sighting)
- CIRCL exploited: CVE-2023-2133 (circl-sighting)
- CIRCL seen: CVE-2023-2133 (circl-sighting)
- CIRCL published-proof-of-concept: CVE-2023-2133 (circl-sighting)
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IHHD6KNH4WLUE6JG6HRQZWNAJMHJ32X7/ (circl)
- https://www.debian.org/security/2023/dsa-5393 (circl)
- https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop_18.html (circl)
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SLO7BL2MHZYPY6O3OAEAQL3SKYMGGO6M/ (circl)
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ES2CDRHR2Y4WY6DNDIAPYZFXJU3ZBFAV/ (circl)
- https://security.gentoo.org/glsa/202309-17 (circl)
…and 4 more exploits
Timeline
- Apr 18, 2023 CVE Published
- Apr 19, 2023 EPSS Score
- Apr 19, 2023 PoC Published
- Apr 20, 2023 PoC Published
- May 26, 2023 EPSS Score
- Jul 3, 2023 EPSS Score
- Jul 11, 2023 PoC Published
- Jul 13, 2023 PoC Published
- Aug 9, 2023 EPSS Score
- Oct 23, 2023 EPSS Score
- Nov 30, 2023 EPSS Score
- Nov 30, 2023 CVE Updated
References
- https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-1000.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-1000 advisory
- https://lists.suse.com/pipermail/sle-security-updates/2023-November/017262.html advisory
- https://security.gentoo.org/glsa/202309-17 advisory
- https://docs.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security advisory
- https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security#april-21-2023 advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-2023-911c060ded advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-91a369658f advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-2023-2b6ba1c253 advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-221f366aca advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-2023-fa739b5753 advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-30f3deb00a advisory
- https://www.debian.org/security/2023/dsa-5393 advisory
- https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-2023-8cc9731416 advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-2023-c1741c9724 advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-2023-df075a7f85 advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-9631f50abc advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-c126e4af73 advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-fc1538262d advisory
…and 1 more