Google Chrome Multiple Vulnerabilities

Release Date: 28 Sep 2023 4112 Views

RISK: Extremely High Risk

TYPE: Clients - Browsers

Multiple vulnerabilities were identified in Google Chrome. A remote attacker could exploit some of these vulnerabilities to trigger elevation of privilege, remote code execution and denial of service condition on the targeted system.

Note:

For CVE-2023-5217, Heap buffer overflow in vp8 encoding in libvpx. Google is aware of a report that this issue may have been actively exploited against versions of Chrome before 117.0.5938.132.

Impact

Remote Code Execution
Denial of Service
Security Restriction Bypass

System / Technologies affected

Google Chrome prior to 117.0.5938.132 (Linux)
Google Chrome prior to 117.0.5938.132 (Mac)
Google Chrome prior to 117.0.5938.132 (Windows)

Solutions

Before installation of the software, please visit the software vendor web-site for more details.

Apply fixes issued by the vendor:

Update to version 117.0.5938.132 (Linux) or later
Update to version 117.0.5938.132 (Mac) or later
Update to version 117.0.5938.132 (Windows) or later

Vulnerability Identifier

Source

Google Chrome