PT-2023-7512 · Microsoft+4 · Edge+4
Khalil
·
Published
2023-10-21
·
Updated
2024-11-29
·
CVE-2023-6509
CVSS v2.0
9.0
High
| Vector | AV:N/AC:L/Au:N/C:P/I:C/A:P |
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 120.0.6099.62
Microsoft Edge (affected versions not specified)
Description
The issue is related to a use after free vulnerability in the Side Panel Search element of Google Chrome and Microsoft Edge browsers. This vulnerability is associated with memory usage after it has been freed. Exploitation of this issue may allow a remote attacker to execute arbitrary code by convincing a user to engage in specific UI interactions, potentially leading to heap corruption.
Recommendations
For Google Chrome versions prior to 120.0.6099.62, update to version 120.0.6099.62 or later to resolve the issue.
For Microsoft Edge, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Google Chrome
Edge
Red Os