VDB
CVE-2023-4352
CVE-2023-4352
PUBLISHED
Es bestehen mehrere Schwachstellen in Google Chrome und Microsoft Edge. Diese Fehler bestehen unter anderem in den Komponenten Offline, Device Trust Connectors, Fullscreen, Network, V8 und ANGLE von Chrome und werden unter anderem durch eine Verwendung nach dem Freigeben, eine unangemessene Implementierung, eine Typverwechslung oder einen Heap-Pufferüberlauf verursacht. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen Denial-of-Service-Zustand herbeizuführen, beliebigen Code auszuführen, Dateien zu manipulieren, Sicherheitsvorkehrungen zu umgehen oder vertrauliche Informationen offenzulegen. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion.
EPSS 1.61% · 82.1th percentile
Risk Scores
EPSS Score
1.61%
82.1th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian | Debian Linux | |
| Microsoft | Microsoft Edge < 116.0.1938.54 | |
| Gentoo | Gentoo Linux | |
| Fedora | Fedora Linux | |
| Microsoft | Microsoft Edge <= 115.0.1901.200 | |
| Microsoft | Microsoft Edge <= 114.0.1823.106 |
Exploit Intelligence
- https://chromereleases.googleblog.com/2023/08/stable-channel-update-for-desktop_15.html (circl)
- https://crbug.com/1452076 (circl)
- https://www.debian.org/security/2023/dsa-5479 (circl)
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OCFEK63FUHFXZH5MSG6TNQOXMQWM4M5S/ (circl)
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2DMXHPRUGBUDNHZCZCIVMWAUIEXEGMGT/ (circl)
- http://packetstormsecurity.com/files/174669/Chrome-Read-Only-Property-Overwrite.html (circl)
- https://security.gentoo.org/glsa/202401-34 (circl)
- Chrome Read-Only Property Overwrite Exploit (0day-today)
- Chrome Read-Only Property Overwrite Exploit (0day-today)
- Chrome Read-Only Property Overwrite Exploit (0day-today)
Timeline
- Aug 15, 2023 CVE Published
- Aug 16, 2023 EPSS Score
- Sep 18, 2023 PoC Published
- Sep 18, 2023 EPSS Score
- Nov 24, 2023 EPSS Score
- Dec 27, 2023 EPSS Score
- Mar 3, 2024 EPSS Score
- Apr 5, 2024 EPSS Score
- Jun 11, 2024 EPSS Score
- Jul 14, 2024 EPSS Score
- Sep 19, 2024 EPSS Score
- Oct 22, 2024 EPSS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-2064.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-2064 advisory
- https://chromereleases.googleblog.com/2023/08/stable-channel-update-for-desktop_15.html advisory
- https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security advisory
- https://lists.debian.org/debian-security-announce/2023/msg00171.html advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-2023-f8e94641dc advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-2023-5416cd3040 advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-f08c8f0812 advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-254992a2ef advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-db0eac64fb advisory
- https://security.gentoo.org/glsa/202401-34 advisory