Google Chrome Security Update (stable-channel-update-for-desktop-2023-11) - Windows
🗓️ 09 Nov 2023 00:00:00Reported by Copyright (C) 2023 Greenbone AGType
openvas🔗 plugins.openvas.org👁 23 Views
| Reporter | Title | Published | Views | Family All 307 |
|---|---|---|---|---|
| chromium -- security update | 7 Nov 202300:00 | – | freebsd | |
| electron{25,26} -- use after free in WebAudio | 15 Nov 202300:00 | – | freebsd | |
| CVE-2023-5996 | 8 Nov 202319:18 | – | alpinelinux | |
| Astra Linux – Vulnerability in Chromium | 20 May 202605:53 | – | astralinux | |
| The vulnerability of the WebAudio component in Google Chrome and Microsoft Edge allows a hacker to execute arbitrary code. | 14 Nov 202300:00 | – | bdu_fstec | |
| Google Chrome Security Vulnerability | 7 Nov 202300:00 | – | cnnvd | |
| CVE-2023-5996 | 8 Nov 202319:18 | – | cve | |
| CVE-2023-5996 | 8 Nov 202319:18 | – | cvelist | |
| [SECURITY] [DSA 5551-1] chromium security update | 9 Nov 202308:11 | – | debian | |
| CVE-2023-5996 | 8 Nov 202319:18 | – | debiancve |
10
| Source | Link |
|---|---|
| chromereleases | www.chromereleases.googleblog.com/2023/11/stable-channel-update-for-desktop.html |
# SPDX-FileCopyrightText: 2023 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only
CPE = "cpe:/a:google:chrome";
if(description)
{
script_oid("1.3.6.1.4.1.25623.1.0.832576");
script_version("2023-11-17T16:10:13+0000");
script_cve_id("CVE-2023-5996");
script_tag(name:"cvss_base", value:"10.0");
script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:N/C:C/I:C/A:C");
script_tag(name:"last_modification", value:"2023-11-17 16:10:13 +0000 (Fri, 17 Nov 2023)");
script_tag(name:"severity_vector", value:"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H");
script_tag(name:"severity_origin", value:"NVD");
script_tag(name:"severity_date", value:"2023-11-15 15:48:00 +0000 (Wed, 15 Nov 2023)");
script_tag(name:"creation_date", value:"2023-11-09 16:28:02 +0530 (Thu, 09 Nov 2023)");
script_name("Google Chrome Security Update (stable-channel-update-for-desktop-2023-11) - Windows");
script_tag(name:"summary", value:"Google Chrome is prone to an Use-after-free
vulnerability.");
script_tag(name:"vuldetect", value:"Checks if a vulnerable version is present
on the target host.");
script_tag(name:"insight", value:"The flaw exists due to an use after free error in
WebAudio.");
script_tag(name:"impact", value:"Successful exploitation will allow
attackers to potentially exploit heap corruption via a crafted HTML page on
an affected system.");
script_tag(name:"affected", value:"Google Chrome version prior to
119.0.6045.123 on Windows");
script_tag(name:"solution", value:"Upgrade to version 119.0.6045.123/.124 or
later. Please see the references for more information.");
script_tag(name:"solution_type", value:"VendorFix");
script_tag(name:"qod_type", value:"registry");
script_xref(name:"URL", value:"https://chromereleases.googleblog.com/2023/11/stable-channel-update-for-desktop.html");
script_category(ACT_GATHER_INFO);
script_copyright("Copyright (C) 2023 Greenbone AG");
script_family("General");
script_dependencies("gb_google_chrome_detect_win.nasl");
script_mandatory_keys("GoogleChrome/Win/Ver");
exit(0);
}
include("host_details.inc");
include("version_func.inc");
if(!infos = get_app_version_and_location(cpe:CPE, exit_no_version:TRUE))
exit(0);
vers = infos["version"];
path = infos["location"];
if(version_is_less(version:vers, test_version:"119.0.6045.123")) {
report = report_fixed_ver(installed_version:vers, fixed_version:"119.0.6045.123/.124", install_path:path);
security_message(port:0, data:report);
exit(0);
}
exit(99);
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Nov 2023 00:00Current
8.6High risk
Vulners AI Score8.6
CVSS 3.18.8
EPSS0.01976