PT-2023-7331 · Google+5 · Mojo Ipc+6

Guang Gong + 1 · Publicado 2023-10-21 · Atualizado 2025-06-05 · CVE-2023-6347

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 119.0.6045.199 Microsoft Edge versions (affected versions not specified)

Description The issue is related to a use after free vulnerability in the Mojo IPC library, which can be exploited by a remote attacker to potentially impact the confidentiality, integrity, and availability of protected information. This can be achieved via a crafted HTML page, allowing for heap corruption.

Recommendations For Google Chrome versions prior to 119.0.6045.199, update to version 119.0.6045.199 or later to resolve the issue. For Microsoft Edge, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Enumeração de Fraquezas

CWE-416

Identificadores relacionados

ALT-PU-2023-8110

ALT-PU-2023-8370

ALT-PU-2024-10294

ALT-PU-2024-14286

ALT-PU-2024-14830

BDU:2023-08361

CVE-2023-6347

DSA-5569-1

OPENSUSE-SU-2023:0387-1

OPENSUSE-SU-2023:0396-1

OPENSUSE-SU-2023:0397-1

OPENSUSE-SU-2023_0396-1

OPENSUSE-SU-2023_0397-1

OPENSUSE-SU-2024:13473-1

OPENSUSE-SU-2024:13481-1

OPENSUSE-SU-2024:13483-1

OPENSUSE-SU-2024:14001-1

Produtos afetados

Alt Linux

Astra Linux

Google Chrome

Edge

Mojo Ipc

Red Os

Suse

Referências · 71

• 🔥 https://github.com/mistymntncop/CVE-2023-4863 · Exploit
• 🔥 https://github.com/xcanwin/CVE-2023-4357-Chrome-XXE · Exploit
• 🔥 https://github.com/ading2210/CVE-2024-6778-POC · Exploit
• 🔥 https://github.com/mistymntncop/CVE-2024-5274 · Exploit
• 🔥 https://github.com/kaist-hacking/CVE-2023-6702 · Exploit
• 🔥 https://github.com/mistymntncop/CVE-2023-2033 · Exploit
• 🔥 https://github.com/OgulcanUnveren/CVE-2023-4357-APT-Style-exploitation · Exploit
• 🔥 https://github.com/LiveOverflow/webp-CVE-2023-4863 · Exploit
• 🔥 https://github.com/tianstcht/CVE-2023-4427 · Exploit
• 🔥 https://github.com/zckevin/CVE-2023-4762 · Exploit
• 🔥 https://github.com/buptsb/CVE-2023-4762 · Exploit
• 🔥 https://github.com/rycbar77/CVE-2024-2887 · Exploit
• 🔥 https://github.com/sandumjacob/CVE-2023-2033-Analysis · Exploit
• 🔥 https://github.com/wrv/cve-2023-5217-poc · Exploit
• 🔥 https://github.com/UT-Security/cve-2023-5217-poc · Exploit