- 269/2023
- High
Google has released an updated Chrome version (118.0.5993.117/.118) for Windows, and (118.0.5993.117) for Mac and Linux to fix a vulnerability.
The addressed vulnerability could allow the remote attacker to execute arbitrary code and gain access to the affected system by persuading the victim to visit a specially crafted website.
Google Chrome Code Execution Vulnerability (CVE-2023-5472):
- CVSS: 8.8
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: Required
- Consequences: Gain Access
Vulnerabilities
CVE-2023-5472
Mitigations
The enterprise should deploy this patch as soon as the testing phase is completed.