- 34/2023
- High
Google has released an updated Chrome version (110.0.5481.77/.78) for Windows and (110.0.5481.77) for Linux and Mac to fix multiple vulnerabilities.
The addressed vulnerabilities could allow the remote attacker to execute arbitrary code on the system, bypass security restrictions, or cause a denial of service by persuading the victim to visit a specially crafted webpage on the affected system.
Sample of the addressed vulnerabilities:
1. Google Chrome V8 Code Execution (CVE-2023-0696):
• CVSS: 8.8
• Attack Vector: Network
• Attack Complexity: Low
• Privileges Required: None
• User Interaction: Required
• Consequences: Gain Access
2. Google Chrome WebRTC Code Execution (CVE-2023-0698):
• CVSS: 8.8
• Attack Vector: Network
• Attack Complexity: Low
• Privileges Required: None
• User Interaction: Required
• Consequences: Gain Access
Vulnerabilities
- CVE-2023-0696
- CVE-2023-0697
- CVE-2023-0698
- CVE-2023-0699
- CVE-2023-0700
- CVE-2023-0701
- CVE-2023-0702
- CVE-2023-0703
- CVE-2023-0704
- CVE-2023-0705
Mitigations
The enterprise should deploy this patch as soon as the testing phase is completed.