PT-2023-1018 · Google+3 · Google Chrome+3
CVSS v2.0
10
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 109.0.5414.74
Description
The issue is related to a use after free vulnerability in the Overview Mode of Google Chrome, which can lead to heap corruption. This can be exploited by a remote attacker who convinces a user to engage in specific UI interactions via a crafted HTML page. The attacker could potentially execute arbitrary code.
Recommendations
For versions prior to 109.0.5414.74, update to version 109.0.5414.74 or later to resolve the issue. As a temporary workaround, consider avoiding the use of Overview Mode in Google Chrome until the update is applied.
Exploit
Correção
DoS
Use After Free
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Astra Linux
Google Chrome
Red Os