CVE-2023-5479

Inappropriate implementation in Extensions API in Google Chrome prior to 118.0.5993.70 allowed an attacker who convinced a user to install a malicious extension to bypass an enterprise policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2023-5486

Inappropriate implementation in Input in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to spoof security UI via a crafted HTML page. Chromium security severity: Low...

CVE-2023-5478

Inappropriate implementation in Autofill in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2023-5476

Use after free in Blink History in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

CVE-2023-5473

Use after free in Cast in Google Chrome prior to 118.0.5993.70 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Low...

Buffer Overflow

libvpx.so is vulnerable to Buffer Overflow. The vulnerability is due to the vp9alloccontextbuffers function in vp9alloccommon.c and the vp9changeconfig function in vp9encoder.c. There are no proper validation or handling for dynamic memory allocations when processing certain specially formatted...

Oracle Linux 8 : libvpx (ELSA-2023-5537)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-5537 advisory. - Heap buffer overflow in vp8 encoding in libvpx CVE-2023-5217 Resolves: rhbz2241191 Tenable has extracted the preceding description block directly fro...

PT-2023-5969 · Google +4 · Google Chrome +4

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 118.0.5993.70 Description: The issue is related to an inappropriate implementation in the Downloads component of Google Chrome, which allowed a remote attacker to spoof security UI via a crafted HTML page. This...

PT-2023-5911 · Google +4 · Google Chrome +4

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 118.0.5993.70 Description: The issue is related to an inappropriate implementation in the Installer component of Google Chrome, which allowed a local attacker to bypass discretionary access control via a crafte...

PT-2023-6119 · Microsoft +5 · Edge +5

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 118.0.5993.70 Microsoft Edge affected versions not specified Description: The issue is related to an inappropriate implementation in the Extensions API, allowing an attacker to bypass an enterprise policy via a...

Mageia: Security Advisory (MGASA-2023-0282)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Spoofing Attack

chromium is vulnerable to Spoofing Attack. The vulnerability exists due to the inappropriate implementation in Custom Mobile Tabs in the library, which allows an attacker to spoof security UI via a maliciously crafted HTML page...

Spoofing Attack

chromium is vulnerable to Spoofing Attack. The vulnerability exists due to the inappropriate implementation in the Input component of the library, which allows an attacker to spoof security UI via a maliciously crafted HTML page...

Spoofing Attack

chromium is vulnerable to Spoofing Attack. The vulnerability exists due to the inappropriate implementation in the Prompts of the library, which allows an attacker to spoof security UI via a maliciously crafted HTML page...

Improper Input Validation

chromium is vulnerable to Spoofing Attack. The vulnerability exists due to the inappropriate implementation in the Custom Tabs of the library, which allows an attacker to obfuscate a permission prompt via a crafted HTML page...

Improper Input Validation

chromium is vulnerable to Spoofing Attack. The vulnerability exists due to the inappropriate implementation in the Intents of the library, which allows an attacker to obfuscate security UI via a maliciously crafted HTML page...

Improper Access Control

chromium is is vulnerable to Improper Access Control. The vulnerability is due to insufficient enforcement of security policies related to the Autofill feature in Google Chrome. This allows a remote attacker to bypass Autofill restrictions via a crafted HTML page...

Spoofing Attack

chromium is vulnerable to Spoofing Attack. The vulnerability exists due to the inappropriate implementation in Prompts in the library, which allows an attacker to spoof security UI via a maliciously crafted HTML page...

Improper Authorization

chromium is vulnerable to Improper Authorization. The vulnerability allows a remote attacker to bypass security mechanisms with the use of a crafted HTML page due to inappropriate implementation in interstitials, and perform unauthorized actions...

Improper Authorization

chromium is vulnerable to Improper Authorization. The vulnerability allows a remote attacker to bypass security mechanisms with the use of a crafted HTML page due to inappropriate implementation in picture in picture, and perform unauthorized actions...