CVE-2023-0134: Use after free in Cart in Google Chrome prior to 109.0.5414.74 allowed an attacker who convinced a user to install a malicious extension to potentially exploit…

PriorityP342high8.8CVSS 3.1

AVNACLPRNUIRSUCHIHAH

EPSS

0.45%

36.9th percentile

Use after free in Cart in Google Chrome prior to 109.0.5414.74 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via database corruption and a crafted HTML page. (Chromium security severity: Medium)

Affected

9 ranges

Vendor	Product	Version range	Fixed in
chromium	chromium	>= 0 < 109.0.5414.74-2~deb11u1	109.0.5414.74-2~deb11u1
chromium	chromium	>= 0 < 109.0.5414.74-1	109.0.5414.74-1
chromium	chromium	>= 0 < 109.0.5414.74-1	109.0.5414.74-1
chromium	chromium	>= 0 < 109.0.5414.74-1	109.0.5414.74-1
debian	chromium	< chromium 109.0.5414.74-1 (bookworm)	chromium 109.0.5414.74-1 (bookworm)
google	chrome	< 109.0.5414.74	109.0.5414.74
google	chrome	>= unspecified < 109.0.5414.74	109.0.5414.74
google	chrome_chrome	—	—
msrc	microsoft_edge	—	—

CVSS provenance

nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

osv8.8HIGH

vendor_debian8.8HIGH

vendor_msrc8.8HIGH

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

Suricata

ET WEB_SPECIFIC_APPS Atlassian Confluence CVE-2023-22515 Vulnerable Server Detected M1

suricata·2023-10-12·CVSS 9.8

CVE-2023-22515 [CRITICAL] ET WEB_SPECIFIC_APPS Atlassian Confluence CVE-2023-22515 Vulnerable Server Detected M1 ET WEB_SPECIFIC_APPS Atlassian Confluence CVE-2023-22515 Vulnerable Server Detected M1 Rule: alert http [$HOME_NET,$HTTP_SERVERS] any -> any any (msg:"ET WEB_SPECIFIC_APPS Atlassian Confluence CVE-2023-22515 Vulnerable Server Detected M1"; flow:established,to_client; http.response_body; content:"|3c|meta|20|name|3d 22|ajs|2d|version|2d|number|22 20|content|3d 22|8|2e|"; fast_pattern:23,20; pcre:"/^(?:0\.[01234]|1\.[0134]|2\.[0123]|3\.[012]|4\.[012]|5\.[01])\x22/R"; threshold:type limit, count 1, seconds 3600, track by_src; reference:url,confluence.atlassian.com/security/cve-2023-22515-privilege-escalation-vulnerability-in-confluence-data-center-and-server-1295682276.html; reference:url,www.rapid7.com/blog/post/2023/10/04/etr-cve-2023-22515-zero-day-privilege-escalation-in-confluence-serve

Suricata

ET WEB_SPECIFIC_APPS Atlassian Confluence CVE-2023-22515 Vulnerable Server Detected M2

suricata·2023-10-12·CVSS 9.8

CVE-2023-22515 [CRITICAL] ET WEB_SPECIFIC_APPS Atlassian Confluence CVE-2023-22515 Vulnerable Server Detected M2 ET WEB_SPECIFIC_APPS Atlassian Confluence CVE-2023-22515 Vulnerable Server Detected M2 Rule: alert http [$HOME_NET,$HTTP_SERVERS] any -> any any (msg:"ET WEB_SPECIFIC_APPS Atlassian Confluence CVE-2023-22515 Vulnerable Server Detected M2"; flow:established,to_client; http.response_body; content:"|3c|li|20|class|3d 22|print|2d|only|22 3e|Printed|20|by|20|Atlassian|20|Confluence|20|8|2e|"; fast_pattern; pcre:"/^(?:0\.[01234]|1\.[0134]|2\.[0123]|3\.[012]|4\.[012]|5\.[01])\x3c/R"; threshold:type limit, count 1, seconds 3600, track by_src; reference:url,confluence.atlassian.com/security/cve-2023-22515-privilege-escalation-vulnerability-in-confluence-data-center-and-server-1295682276.html; reference:url,www.rapid7.com/blog/post/2023/10/04/etr-cve-2023-22515-zero-day-privilege-escalation-in-conf