Published: 25/10/2023 Updated: 31/01/2024

CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8

VMScore: 0

Use after free in Profiles in Google Chrome before 118.0.5993.117 allowed a remote malicious user to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Vulnerable Product	Search on Vulmon	Subscribe to Product
google chrome
debian debian linux 11.0
debian debian linux 12.0
fedoraproject fedora 38

An important security issue was discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure For the oldstable distribution (bullseye), this problem has been fixed in version 11805993117-1~deb11u1 For the stable distribution (bookworm), this problem has been fixed in version 11805 ...

The Stable channel has been updated to 11805993117 for Mac and Linux and 11805993117/118 for Windows, which will roll out over the coming days/weeks A full list of changes in this build is available in the logThe Extended Stable channel has been updated to 11805993117 for Mac and 11805993118 for Windows, which will roll out ...

LTS-114 has been updated in the LTS channel to 11405735339 (Platform Version: 15437760) for most ChromeOS devices Want to know more about Long Term Support? Click hereThis update contains multiple Security fixes, including:1491296 High  CVE-2023-5472 Use after free in Profiles1458934 Medium CVE-20 ...

CWE-416 https://chromereleases.googleblog.com/2023/10/stable-channel-update-for-desktop_24.html https://crbug.com/1491296 https://www.debian.org/security/2023/dsa-5536 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TDMQG42VVOZ5USSI4NSNT3VJPGBPNSIW/https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5TWIUD4VIISLZWEQ4WLWFZT34T3KOXZB/https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RA6HMWNOYQ56R35MHW77GVW7373Z4RSN/https://security.gentoo.org/glsa/202401-34 https://nvd.nist.gov https://www.debian.org/security/2023/dsa-5536

CVE-2023-5472

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect