PT-2023-2933
CVE-2023-2725
·
Publicado
2023-05-04
·
Atualizado
2024-11-29
Descrição por
CVSS 2.0
10
AltaMétricasAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 113.0.5672.126
Description
The issue is related to the use of memory after it has been freed in the Guest View mode of Google Chrome and Microsoft Edge browsers. This could allow a remote attacker to impact the confidentiality, integrity, and availability of protected information by using a specially crafted HTML page. An attacker who convinces a user to install a malicious extension could potentially exploit heap corruption.
Recommendations
For Google Chrome versions prior to 113.0.5672.126, update to version 113.0.5672.126 or later to resolve the issue. As a temporary workaround, consider avoiding the installation of malicious extensions and restricting access to untrusted HTML pages.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾