Integer overflow in Skia in Google Chrome prior to 112.0.5615.137 allowed a
remote attacker who had compromised the renderer process to potentially
perform a sandbox escape via a crafted HTML page. (Chromium security
severity: High)
Author | Note |
---|---|
alexmurray | The Debian chromium source package is called chromium-browser in Ubuntu |
mdeslaur | starting with Ubuntu 19.10, the chromium-browser package is just a script that installs the Chromium snap |
chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop_18.html
crbug.com/1432603
launchpad.net/bugs/cve/CVE-2023-2136
lists.fedoraproject.org/archives/list/[email protected]/message/FEJZMAUB4XP44HSHEBDWEKFGA7DUHY42/
nvd.nist.gov/vuln/detail/CVE-2023-2136
security-tracker.debian.org/tracker/CVE-2023-2136
www.cve.org/CVERecord?id=CVE-2023-2136