Google Chrome Chrome vulnerabilities

CVE-2023-3739 [MEDIUM] Stable Channel Update for ChromeOS / ChromeOS Flex: CVE-2023-3739 Stable Channel Update for ChromeOS / ChromeOS Flex CVE-2023-3739

CVE-2023-3497 [MEDIUM] Stable Channel Update for ChromeOS / ChromeOS Flex: CVE-2023-3497 Stable Channel Update for ChromeOS / ChromeOS Flex CVE-2023-3497

CVE-2023-2933 [HIGH] Long Term Support Channel Update for ChromeOS: CVE-2023-2933 Long Term Support Channel Update for ChromeOS CVE-2023-2933

CVE-2023-2931 [HIGH] Long Term Support Channel Update for ChromeOS: CVE-2023-2931 Long Term Support Channel Update for ChromeOS CVE-2023-2931

CVE-2023-2932 [HIGH] Long Term Support Channel Update for ChromeOS: CVE-2023-2932 Long Term Support Channel Update for ChromeOS CVE-2023-2932

CVE-2023-3727 [HIGH] Stable Channel Update for Desktop: CVE-2023-3727 Stable Channel Update for Desktop CVE-2023-3727: Use after free in WebRTC. Reported by Cassidy Kim(@cassidy6564) on 2023-06-12 [$7000][ 1457421 ] High CVE-2023-3728: Use after free in WebRTC Reported by Zhenghang Xiao (@Kipreyyy) on 2023-06-23 [$2000][ 1453465 ] High CVE-2023-3730: Use after free in Tab Groups Severity: high

CVE-2023-3738 [MEDIUM] Stable Channel Update for Desktop: CVE-2023-3738 Stable Channel Update for Desktop CVE-2023-3738: Inappropriate implementation in Autofill. Reported by Hafiizh on 2023-04-18 [$1000][ 1405223 ] Low CVE-2023-3740: Insufficient validation of untrusted input in Themes Reported by Fardeen Siddiqui on 2023-01-06 We would also like to thank all security researchers that worked with us during the development cycle to prevent security bugs from ever reaching the stable channel Seve

CVE-2023-3737 [MEDIUM] Stable Channel Update for Desktop: CVE-2023-3737 Stable Channel Update for Desktop CVE-2023-3737: Inappropriate implementation in Notifications. Reported by Narendra Bhati of Suma Soft Pvt Severity: medium

CVE-2023-3420 [HIGH] Stable Channel Update for Desktop: CVE-2023-3420 Stable Channel Update for Desktop CVE-2023-3420: Type Confusion in V8. Reported by Man Yue Mo of GitHub Security Lab on 2023-06-07 [$10000][ 1447568 ] High CVE-2023-3421: Use after free in Media Reported by Piotr Bania of Cisco Talos on 2023-05-22 [$5000][ 1450397 ] High CVE-2023-3422: Use after free in Guest View Severity: high

CVE-2023-32233 [HIGH] Long Term Support Channel Update for ChromeOS: CVE-2023-32233 Long Term Support Channel Update for ChromeOS CVE-2023-32233

CVE-2023-3079 [HIGH] Long Term Support Channel Update for ChromeOS: CVE-2023-3079 Long Term Support Channel Update for ChromeOS CVE-2023-3079

CVE-2023-2935 [HIGH] Long Term Support Channel Update for ChromeOS: CVE-2023-2935 Long Term Support Channel Update for ChromeOS CVE-2023-2935

CVE-2023-0045 [MEDIUM] Long Term Support Channel Update for ChromeOS: CVE-2023-0045 Long Term Support Channel Update for ChromeOS CVE-2023-0045

CVE-2023-2721 [HIGH] Long Term Support Channel Update for ChromeOS: CVE-2023-2721 Long Term Support Channel Update for ChromeOS CVE-2023-2721

CVE-2023-2724 [HIGH] Long Term Support Channel Update for ChromeOS: CVE-2023-2724 Long Term Support Channel Update for ChromeOS CVE-2023-2724

CVE-2023-3214 [CRITICAL] Stable Channel Update for Desktop: CVE-2023-3214 Stable Channel Update for Desktop CVE-2023-3214: Use after free in Autofill payments. Reported by Rong Jian of VRI on 2023-06-01 [$3000][ 1446274 ] High CVE-2023-3215: Use after free in WebRTC Reported by asnine on 2023-05-17 [$TBD][ 1450114 ] High CVE-2023-3216: Type Confusion in V8 Severity: critical

CVE-2023-3217 [HIGH] Stable Channel Update for Desktop: CVE-2023-3217 Stable Channel Update for Desktop CVE-2023-3217: Use after free in WebXR. Reported by Sergei Glazunov of Google Project Zero on 2023-06-01 We would also like to thank all security researchers that worked with us during the development cycle to prevent security bugs from ever reaching the stable channel Severity: high

CVE-2023-2929 [HIGH] Stable Channel Update for Desktop: CVE-2023-2929 Stable Channel Update for Desktop CVE-2023-2929: Out of bounds write in Swiftshader. Reported by Jaehun Jeong(@n3sk) of Theori on 2023-01-25 [$10000][ 1443401 ] High CVE-2023-2930: Use after free in Extensions Reported by asnine on 2023-05-08 [$10000][ 1427865 ] High CVE-2023-3598: Out of bounds read and write in ANGLE Severity: high

CVE-2023-2934 [HIGH] Stable Channel Update for Desktop: CVE-2023-2934 Stable Channel Update for Desktop CVE-2023-2934: Out of bounds memory access in Mojo. Reported by Mark Brand of Google Project Zero on 2023-04-01 [$NA][ 1440695 ] High CVE-2023-2935: Type Confusion in V8 Reported by Sergei Glazunov of Google Project Zero on 2023-04-27 [$NA][ 1443452 ] High CVE-2023-2936: Type Confusion in V8 Severity: high

CVE-2023-2940 [MEDIUM] Stable Channel Update for Desktop: CVE-2023-2940 Stable Channel Update for Desktop CVE-2023-2940: Inappropriate implementation in Downloads. Reported by Axel Chong on 2023-03-22 [$500][ 1430269 ] Low CVE-2023-2941: Inappropriate implementation in Extensions API Reported by Jasper Rebane on 2023-04-04 We would also like to thank all security researchers that worked with us during the development cycle to prevent security bugs from ever reaching the stable channel Severity: