9.6
CVSSv3

CVE-2023-2136

Published: 19/04/2023 Updated: 20/10/2023
CVSS v3 Base Score: 9.6 | Impact Score: 6 | Exploitability Score: 2.8
VMScore: 0

Vulnerability Summary

Integer overflow in Skia in Google Chrome before 112.0.5615.137 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

google chrome

debian debian linux 11.0

fedoraproject fedora 36

fedoraproject fedora 37

fedoraproject fedora 38

Vendor Advisories

Multiple security issues were discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure For the stable distribution (bullseye), these problems have been fixed in version 11205615138-1~deb11u1 We recommend that you upgrade your chromium packages For the detailed security status o ...
The Stable and extended stable channel has been updated to 11205615137/138 for Windows and 11205615137 for Mac which will roll out over the coming days/weeks Linux release coming soon A full list of changes in this build is available in the logStable Channel Update for Desktop - 11205615137 Security Fixes and RewardsNote: Access to ...
LTS-108 is being updated in the LTS channel to 10805359230 (Platform Version: 15183930) for most ChromeOS devices Want to know more about Long Term Support? Click hereThis update contains multiple Security fixes, including:1421268 High  CVE-2023-1532 Out of bounds read in GPU Video1420510 High&nbs ...

Github Repositories

Rosetta is a Python library that allows you to generate fake data of different formats such as Syslog, CEF, LEEF, Winevent and JSON. It also includes a Converter class that can convert between different log formats. Additionally, it provides a Sender class that sends generated data to a specified destination over TCP, UDP, or HTTP protocols.

Rosetta Rosetta is a Python package that can be used to fake security logs and alerts for testing different detection and response use cases It provides the following functions: Generate bad and random observables/indicators that include IP Addresses, Urls, File hashes , CVE's and more Fake log messages in different formats like CEF, LEEF and JSON Convert one log format

Recent Articles

IT threat evolution in Q2 2023. Non-mobile statistics
Securelist • AMR • 30 Aug 2023

IT threat evolution in Q2 2023 IT threat evolution in Q2 2023. Non-mobile statistics IT threat evolution in Q2 2023. Mobile statistics These statistics are based on detection verdicts of Kaspersky products and services received from users who consented to providing statistical data. Quarterly figures According to Kaspersky Security Network, in Q2 2023: Kaspersky solutions blocked 801,934,281 attacks from online resources across the globe. A total of 209,716,810 unique links were detected by Web ...