Published: 11/10/2023 Updated: 31/01/2024

CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8

VMScore: 0

Inappropriate implementation in Extensions API in Google Chrome before 118.0.5993.70 allowed an attacker who convinced a user to install a malicious extension to bypass an enterprise policy via a crafted HTML page. (Chromium security severity: Medium)

Vulnerable Product	Search on Vulmon	Subscribe to Product
google chrome
debian debian linux 11.0
debian debian linux 12.0

Multiple security issues were discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure For the oldstable distribution (bullseye) the updates need an additional toolchain update When completed, fixes will be made available as 1180599370-1~deb11u1 For the stable distribution (boo ...

The Stable channel has been updated to 1180599370 for Mac and Linux and 1180599370/71 for Windows, which will roll out over the coming days/weeks A full list of changes in this build is available in the logThe Extended Stable channel has been updated to 1180599371 for Windows and 1180599370 for Mac, which will roll out over ...

The Stable channel is being updated to 1180599386 (Platform version: 15604450) for most ChromeOS devices and will be rolled out over the next few days This build contains a number of bug fixes and security updatesIf you find new issues, please let us know one of the following ways:File a bug Visit our ChromeOS commun ...

NVD-CWE-noinfo https://chromereleases.googleblog.com/2023/10/stable-channel-update-for-desktop_10.html https://crbug.com/1471253 https://www.debian.org/security/2023/dsa-5526 https://security.gentoo.org/glsa/202311-11 https://security.gentoo.org/glsa/202312-07 https://security.gentoo.org/glsa/202401-34 https://nvd.nist.gov https://www.debian.org/security/2023/dsa-5526

CVE-2023-5479

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect