Lucene search

K
chromeHttps://chromereleases.googleblog.comGCSA-4606627407963848397
HistoryMay 09, 2023 - 12:00 a.m.

Stable Channel Update for ChromeOS / ChromeOS Flex

2023-05-0900:00:00
https://chromereleases.googleblog.com
chromereleases.googleblog.com
19
chromeos
stable channel
update
bug fixes
security updates
chrome browser
high cve
use-after-free
memory corruption
security researchers

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

0.003 Low

EPSS

Percentile

70.7%

The Stable channel is being updated to 15393.48.0 (Platform version:113.0.5672.114) for most ChromeOS devices and will be rolled out over the next few days. This build contains a number of bug fixes and security updates.

If you find new issues, please let us know one of the following ways:

Interested in switching channels? Find out how.

Matt Nelson,

Google ChromeOS

Security Fixes and Rewards

Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictions if the bug exists in a third party library that other projects similarly depend on, but haven't yet fixed.

For Chrome browser fixes, see the Chrome Desktop release announcement.

[$5000] [1430692] High CVE-2023-2458 Use-after-free in ChromeOS Ash. Reported by ChaobinZhang

[$17500] [1420790] High CVE-CVE-2023-2457 ChromeOS Memory Corruption. Reported by raven at KunLun lab

[$T4000] [1350561] Medium CVE-2023-2461 Use-after-free in ChromOS. Reported by @ginggilBesel

We would also like to thank all security researchers that worked with us during the development cycle to prevent security bugs from ever reaching the stable channel.

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

0.003 Low

EPSS

Percentile

70.7%