Lucene search

K
alpinelinuxAlpine Linux Development TeamALPINE:CVE-2023-6345
HistoryNov 29, 2023 - 12:15 p.m.

CVE-2023-6345

2023-11-2912:15:07
Alpine Linux Development Team
security.alpinelinux.org
15
skia
google chrome
sandbox escape
malicious file
integer overflow
unix
cve-2023-6345

9.6 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

9.4 High

AI Score

Confidence

High

0.074 Low

EPSS

Percentile

94.1%

Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High)

9.6 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

9.4 High

AI Score

Confidence

High

0.074 Low

EPSS

Percentile

94.1%