Mozilla Firefox ESR < 115.2.1

The version of Firefox ESR installed on the remote Windows host is prior to 115.2.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2023-40 advisory. - Opening a malicious WebP image could lead to a heap buffer overflow in the content process. We are aware of this issue...

Mozilla Thunderbird < 115.2.2

The version of Thunderbird installed on the remote Windows host is prior to 115.2.2. It is, therefore, affected by a vulnerability as referenced in the mfsa2023-40 advisory. - Opening a malicious WebP image could lead to a heap buffer overflow in the content process. We are aware of this issue...

FreeBSD : electron22 -- multiple vulnerabilities (3693eca5-f0d3-453c-9558-2353150495bb)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 3693eca5-f0d3-453c-9558-2353150495bb advisory. - Use after free in MediaStream in Google Chrome prior to 116.0.5845.140 allowed a remote...

Mozilla Firefox Security Advisory (MFSA2023-40) - Linux

The remote host is missing an update for Mozilla Firefox, announced via the advisory MFSA2023-40. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

Mozilla Thunderbird < 115.2.2

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 115.2.2. It is, therefore, affected by a vulnerability as referenced in the mfsa2023-40 advisory. - Opening a malicious WebP image could lead to a heap buffer overflow in the content process. We are aware of thi...

electron22 -- multiple vulnerabilities

Electron developers report: This update fixes the following vulnerabilities: Security: backported fix for CVE-2023-4572. Security: backported fix for CVE-2023-4762. Security: backported fix for CVE-2023-4863...

Mozilla Thunderbird < 102.15.1

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 102.15.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2023-40 advisory. - Opening a malicious WebP image could lead to a heap buffer overflow in the content process. We are aware of th...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2023:0246-1 Rating: important References: 1215231 Cross-References: CVE-2023-4863 CVSS scores: CVE-2023-4863 SUSE: 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP4...

Mozilla Thunderbird < 102.15.1

The version of Thunderbird installed on the remote Windows host is prior to 102.15.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2023-40 advisory. - Opening a malicious WebP image could lead to a heap buffer overflow in the content process. We are aware of this issue...

Mozilla Firefox ESR < 102.15.1

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 102.15.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2023-40 advisory. - Opening a malicious WebP image could lead to a heap buffer overflow in the content process. We are aware of th...

Mozilla Firefox < 117.0.1

The version of Firefox installed on the remote Windows host is prior to 117.0.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2023-40 advisory. - Opening a malicious WebP image could lead to a heap buffer overflow in the content process. We are aware of this issue being...

electron{24,25} -- multiple vulnerabilities

Electron developers report: This update fixes the following vulnerabilities: Security: backported fix for CVE-2023-4763. Security: backported fix for CVE-2023-4762. Security: backported fix for CVE-2023-4761. Security: backported fix for CVE-2023-4863...

CVE-2023-4863 vulnerabilities

Vulnerabilities for packages: libwebp...

CVE-2023-4863 vulnerabilities

Vulnerabilities for packages: libwebp, firefox-esr...

CVE-2023-4863

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. Chromium security severity: Critical...

CVE-2023-4863

CVE-2023-4863 describes a heap buffer overflow in libwebp used by Google Chrome prior to 116.0.5845.187 and in libwebp 1.3.2. A remote attacker can cause an out-of-bounds memory write by presenting a crafted HTML page. The vulnerability is exploitable over the network and requires user interactio...

Google Addresses Fourth Zero-Day Flaw Exploited by Attackers Wildly

Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary The zero-day vulnerability CVE-2023-4863 in Google Chrome enables arbitrary code execution and system crashes. Actively exploited "in the wild," it poses severe risks, including data exposure and...

Minor update(2) for Vivaldi Android Browser 6.2

Head to the Google Play Store and download the browser. Alternatively, you can download Vivaldi from Uptodown, the Android app store. Your rating for our browser matters. ⭐️ ⭐️ ⭐️ ⭐️ ⭐️ Enjoy! Changelog The following is a list of changes since the first 6.2 stable, minor update: Chromium Upgraded...

Minor update (3) for Vivaldi Desktop Browser 6.2

Download Vivaldi The following improvements were made since the second 6.2 minor update: Chromium Upgraded to 116.0.5845.195: fixes CVE-2023-4863 a.k.a CVE-2023-5129 — Heap buffer overflow in WebP. Reported by Apple Security Engineering and Architecture SEAR and The Citizen Lab at The University ...

Chromium: CVE-2023-4863 Heap buffer overflow in WebP

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. Google is aware that an exploit for CVE-2023-4863 exists in the wild...