VDB
CVE-2023-4908
CVE-2023-4908
PUBLISHED
Google Chrome / Microsoft Edge enthält mehrere Schwachstellen. Die Schwachstellen sind auf eine unsachgemäße Implementierung in den Komponenten "Custom Tabs", "Prompts", "Input", "Custom Mobile Tabs", "Intents", "Picture in Picture" und "Interstitials" sowie auf eine unzureichende Durchsetzung von Richtlinien in den Komponenten "Downloads" und "Autofill" zurückzuführen. Ein entfernter Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsmaßnahmen zu umgehen und weitere, nicht näher spezifizierte Auswirkungen zu erzielen. Zur erfolgreichen Ausnutzung dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.
EPSS 0.27% · 50.8th percentile
Risk Scores
EPSS Score
0.27%
50.8th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Fedora | Fedora Linux | |
| Debian | Debian Linux | |
| Red Hat | Red Hat Enterprise Linux | |
| Gentoo | Gentoo Linux |
Exploit Intelligence
- https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_12.html (circl)
- https://crbug.com/1451543 (circl)
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T655QF7CQ3DYAMPFV7IECQYGDEUIVVT/ (circl)
- https://www.debian.org/security/2023/dsa-5499 (circl)
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KUQ7CTX3W372X3UY56VVNAHCH6H2F4X3/ (circl)
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WTRUIS3564P7ZLM2S2IH4Y4KZ327LI4I/ (circl)
- https://security.gentoo.org/glsa/202401-34 (circl)
- rules.yar (github-yara)
- rules.yar (github-yara)
- rules.yar (github-yara)
…and 9 more exploits
Timeline
- Sep 12, 2023 CVE Published
- Sep 13, 2023 EPSS Score
- Oct 5, 2023 PoC Published
- Oct 15, 2023 EPSS Score
- Nov 17, 2023 EPSS Score
- Dec 19, 2023 EPSS Score
- Jan 21, 2024 EPSS Score
- Mar 25, 2024 EPSS Score
- Apr 27, 2024 EPSS Score
- May 29, 2024 EPSS Score
- Jun 30, 2024 EPSS Score
- Aug 2, 2024 EPSS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-2310.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-2310 advisory
- https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_12.html advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-2023-d5faede1d6 advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-2023-509640a8a6 advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-2023-3d1935dc6a advisory
- https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security#september-15-2023 advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-c66924cb92 advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-2023-3bfb63f6d2 advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-2023-0de0929147 advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-54433bc31f advisory
- https://lists.debian.org/debian-security-announce/2023/msg00191.html advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-2023-d58a84dda8 advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-ea08732e6a advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-2023-a33b8c01e7 advisory
- https://access.redhat.com/errata/RHSA-2023:5191 advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-2023-b427f54e68 advisory
- https://access.redhat.com/errata/RHSA-2023:5204 advisory
- https://access.redhat.com/errata/RHSA-2023:5190 advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-79b0154754 advisory
…and 14 more