Skip to main content

ChromeOS Multiple Vulnerabilities

Release Date: 27 Sep 2023 3543 Views

RISK: Extremely High Risk

TYPE: Operating Systems - Others OS

TYPE: Others OS

Multiple vulnerabilities were identified in ChromeOS. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, elevation of privilege, remote code execution and security restriction bypass on the targeted system.

 

Note:

For CVE-2023-4863, heap buffer overflow in WebP may lead to arbitrary code execution. Google is aware that an exploit for CVE-2023-4863 exists in the wild.


Impact

  • Remote Code Execution
  • Elevation of Privilege
  • Denial of Service
  • Security Restriction Bypass

System / Technologies affected

  • Version prior to 117.0.5938.115 (Platform Version: 15572.50.0)

Solutions

Before installation of the software, please visit the vendor web-site for more details.

 

Apply fixes issued by the vendor. For detail, please refer to the link below:


Vulnerability Identifier


Source


Related Link