Lucene search
+L

Google Chrome Security Update (stable-channel-update-for-desktop-2023-11) - Windows

🗓️ 09 Nov 2023 00:00:00Reported by Copyright (C) 2023 Greenbone AGType 
openvas
 openvas
🔗 plugins.openvas.org👁 23 Views

Google Chrome Use-after-free vulnerability fix for Window

Related
Refs
Code
ReporterTitlePublishedViews
Family
freebsd
FreeBSD
chromium -- security update
7 Nov 202300:00
freebsd
freebsd
FreeBSD
electron{25,26} -- use after free in WebAudio
15 Nov 202300:00
freebsd
alpinelinux
AlpineLinux
CVE-2023-5996
8 Nov 202319:18
alpinelinux
astralinux
AstraLinux
Astra Linux – Vulnerability in Chromium
20 May 202605:53
astralinux
bdu_fstec
BDU FSTEC
The vulnerability of the WebAudio component in Google Chrome and Microsoft Edge allows a hacker to execute arbitrary code.
14 Nov 202300:00
bdu_fstec
cnnvd
CNNVD
Google Chrome Security Vulnerability
7 Nov 202300:00
cnnvd
cve
CVE
CVE-2023-5996
8 Nov 202319:18
cve
cvelist
Cvelist
CVE-2023-5996
8 Nov 202319:18
cvelist
debian
Debian
[SECURITY] [DSA 5551-1] chromium security update
9 Nov 202308:11
debian
debiancve
Debian CVE
CVE-2023-5996
8 Nov 202319:18
debiancve
Rows per page
# SPDX-FileCopyrightText: 2023 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only

CPE = "cpe:/a:google:chrome";

if(description)
{
  script_oid("1.3.6.1.4.1.25623.1.0.832576");
  script_version("2023-11-17T16:10:13+0000");
  script_cve_id("CVE-2023-5996");
  script_tag(name:"cvss_base", value:"10.0");
  script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:N/C:C/I:C/A:C");
  script_tag(name:"last_modification", value:"2023-11-17 16:10:13 +0000 (Fri, 17 Nov 2023)");
  script_tag(name:"severity_vector", value:"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H");
  script_tag(name:"severity_origin", value:"NVD");
  script_tag(name:"severity_date", value:"2023-11-15 15:48:00 +0000 (Wed, 15 Nov 2023)");
  script_tag(name:"creation_date", value:"2023-11-09 16:28:02 +0530 (Thu, 09 Nov 2023)");
  script_name("Google Chrome Security Update (stable-channel-update-for-desktop-2023-11) - Windows");

  script_tag(name:"summary", value:"Google Chrome is prone to an Use-after-free
  vulnerability.");

  script_tag(name:"vuldetect", value:"Checks if a vulnerable version is present
  on the target host.");

  script_tag(name:"insight", value:"The flaw exists due to an use after free error in
  WebAudio.");

  script_tag(name:"impact", value:"Successful exploitation will allow
  attackers to potentially exploit heap corruption via a crafted HTML page on
  an affected system.");

  script_tag(name:"affected", value:"Google Chrome version prior to
  119.0.6045.123 on Windows");

  script_tag(name:"solution", value:"Upgrade to version 119.0.6045.123/.124 or
  later. Please see the references for more information.");

  script_tag(name:"solution_type", value:"VendorFix");
  script_tag(name:"qod_type", value:"registry");
  script_xref(name:"URL", value:"https://chromereleases.googleblog.com/2023/11/stable-channel-update-for-desktop.html");
  script_category(ACT_GATHER_INFO);
  script_copyright("Copyright (C) 2023 Greenbone AG");
  script_family("General");
  script_dependencies("gb_google_chrome_detect_win.nasl");
  script_mandatory_keys("GoogleChrome/Win/Ver");
  exit(0);
}

include("host_details.inc");
include("version_func.inc");

if(!infos = get_app_version_and_location(cpe:CPE, exit_no_version:TRUE))
  exit(0);

vers = infos["version"];
path = infos["location"];

if(version_is_less(version:vers, test_version:"119.0.6045.123")) {
  report = report_fixed_ver(installed_version:vers, fixed_version:"119.0.6045.123/.124", install_path:path);
  security_message(port:0, data:report);
  exit(0);
}

exit(99);

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Nov 2023 00:00Current
8.6High risk
Vulners AI Score8.6
CVSS 3.18.8
EPSS0.01976
23