CVE-2023-2313Google Chrome vulnerability

5 documents5 sources
Severity
8.8HIGHNVD
EPSS
0.5%
top 32.56%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedJul 29

Description

Inappropriate implementation in Sandbox in Google Chrome on Windows prior to 112.0.5615.49 allowed a remote attacker who had compromised the renderer process to perform arbitrary read/write via a malicious file. (Chromium security severity: High)

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages5 packages

CVEListV5google/chrome112.0.5615.49112.0.5615.49
NVDgoogle/chrome< 112.0.5615.49
debiandebian/chromium< chromium 112.0.5615.49-1 (bookworm)
Debianchromium/chromium< 112.0.5615.49-2~deb11u2+3

🔴Vulnerability Details

2
GHSA
GHSA-mq7w-mj9p-33fc: Inappropriate implementation in Sandbox in Google Chrome on Windows prior to 1122023-07-29
OSV
CVE-2023-2313: Inappropriate implementation in Sandbox in Google Chrome on Windows prior to 1122023-07-29

📋Vendor Advisories

2
Chrome
Stable Channel Update for Desktop: CVE-2023-18102023-04-04
Debian
CVE-2023-2313: chromium - Inappropriate implementation in Sandbox in Google Chrome on Windows prior to 112...2023