PT-2023-7683 · Google+4 · Google Chrome+4

Ginggilbesel

·

Publicado

2023-11-21

·

Atualizado

2024-11-29

·

CVE-2023-6707

CVSS v3.1

8.8

Alta

VetorAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 120.0.6099.109
Description The issue is related to a use after free in CSS, which could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. This could lead to unauthorized access to protected information.
Recommendations For versions prior to 120.0.6099.109, update to version 120.0.6099.109 or later to resolve the issue. As a temporary workaround, consider avoiding the use of crafted HTML pages that could trigger the heap corruption.

Exploit

Correção

Use After Free

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-416

Identificadores relacionados

ALT-PU-2023-8110
ALT-PU-2023-8370
ALT-PU-2024-10294
ALT-PU-2024-14286
ALT-PU-2024-14830
BDU:2023-08750
CVE-2023-6707
DSA-5577-1
MGASA-2023-0355
OPENSUSE-SU-2024:0001-1
OPENSUSE-SU-2024:0002-1
OPENSUSE-SU-2024:0020-1
OPENSUSE-SU-2024:13583-1
OPENSUSE-SU-2024:13585-1
OPENSUSE-SU-2024_0001-1
OPENSUSE-SU-2024_0002-1

Produtos afetados

Alt Linux
Astra Linux
Google Chrome
Red Os
Suse