Lucene search
Ubuntu.comUB:CVE-2023-4072HistoryAug 03, 2023 - 12:00 a.m.
CVE-2023-4072
2023-08-0300:00:00
ubuntu.com
ubuntu.com
11
webgl
google chrome
out of bounds
remote attacker
heap corruption
crafted html page
ubuntu
debian
chromium snap
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.003
Percentile
70.7%
Out of bounds read and write in WebGL in Google Chrome prior to
115.0.5790.170 allowed a remote attacker to potentially exploit heap
corruption via a crafted HTML page. (Chromium security severity: High)
Notes
| Author | Note |
|---|---|
| alexmurray | The Debian chromium source package is called chromium-browser in Ubuntu |
| mdeslaur | starting with Ubuntu 19.10, the chromium-browser package is just a script that installs the Chromium snap |
Related
cve
cve
CVE-2023-4072
2023-08-03 01:15:11
cvelist
cvelist
CVE-2023-4072
2023-08-03 00:27:47
veracode
veracode
Denial Of Service (DoS)
2023-08-06 11:58:49
debiancve
debiancve
CVE-2023-4072
2023-08-03 01:15:11
prion
prion
Design/Logic Flaw
2023-08-03 01:15:00
mscve
mscve
Chromium: CVE-2023-4072 Out of bounds read and write in WebGL
2023-08-07 07:00:00
nvd
nvd
CVE-2023-4072
2023-08-03 01:15:11
osv
osv
CVE-2023-4072
2023-08-03 01:15:11
ungoogled-chromium-115.0.5790.170-1.1 on GA media
2024-06-15 00:00:00
chromium - security update
2023-08-04 00:00:00
nessus
nessus
Photon OS 5.0: Chromium PHSA-2023-5.0-0081
2024-07-24 00:00:00
Debian DSA-5467-1 : chromium - security update
2023-08-05 00:00:00
openSUSE 15 Security Update : chromium (openSUSE-SU-2023:0216-1)
2023-08-08 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2023-5.0-0081
2023-08-27 00:00:00
Important Photon OS Security Update - PHSA-2023-4.0-0459
2023-08-28 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-5467-1)
2023-08-07 00:00:00
chrome
chrome
Stable Channel Update for Desktop
2023-08-02 00:00:00
freebsd
freebsd
chromium -- multiple vulnerabilities
2023-08-02 00:00:00
electron25 -- multiple vulnerabilities
2023-08-23 00:00:00
kaspersky
kaspersky
KLA51621 Multiple vulnerabilities in Google Chrome
2023-08-02 00:00:00
KLA61309 Multiple vulnerabilities in Opera
2023-08-09 00:00:00
KLA51709 Multiple vulnerabilities in Microsoft Browser
2023-08-07 00:00:00
debian
debian
[SECURITY] [DSA 5467-1] chromium security update
2023-08-04 18:23:28
gentoo
gentoo
QtWebEngine: Multiple Vulnerabilities
2023-12-22 00:00:00
QtWebEngine: Multiple Vulnerabilities
2023-11-25 00:00:00
Chromium, Google Chrome, Microsoft Edge: Multiple Vulnerabilities
2024-01-31 00:00:00
fedora
fedora
[SECURITY] Fedora 38 Update: chromium-115.0.5790.170-1.fc38
2023-08-12 04:26:44
rapid7blog
rapid7blog
Patch Tuesday - August 2023
2023-08-08 21:11:35
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.003
Percentile
70.7%
Related for UB:CVE-2023-4072