NA

CVE-2023-2134

Published: 19/04/2023 Updated: 20/10/2023
CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8
VMScore: 0

Vulnerability Summary

Out of bounds memory access in Service Worker API in Google Chrome before 112.0.5615.137 allowed a remote malicious user to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

google chrome

debian debian linux 11.0

fedoraproject fedora 36

fedoraproject fedora 37

fedoraproject fedora 38

Vendor Advisories

Multiple security issues were discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure For the stable distribution (bullseye), these problems have been fixed in version 11205615138-1~deb11u1 We recommend that you upgrade your chromium packages For the detailed security status o ...
The Stable and extended stable channel has been updated to 11205615137/138 for Windows and 11205615137 for Mac which will roll out over the coming days/weeks Linux release coming soon A full list of changes in this build is available in the logStable Channel Update for Desktop - 11205615137 Security Fixes and RewardsNote: Access to ...
LTS-108 is being updated in the LTS channel to 10805359231 (Platform Version: 15183940) for most ChromeOS devices Want to know more about Long Term Support? Click hereThis update contains multiple Security fixes, including:1424337 High  CVE-2023-2135 Use after free in DevTools1429201 High CVE ...