- 225/2023
- High
Google has released an updated Chrome version (117.0.5938.62/.63) for Windows, (117.0.5938.62) for Linux, and Mac and (109.0.5414.165) for Windows Server 2012, and Windows Server 2012 R2 only to fix several vulnerabilities.
The addressed vulnerabilities could allow the remote attacker to execute arbitrary code, bypass security restrictions, and gain access to the affected system by persuading the victim to visit a specially crafted website.
Sample of the addressed vulnerability:
Google Chrome Security Bypass Vulnerability (CVE-2023-4909):
- CVSS: 6.5
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: Required
- Consequences: Bypass Security
It should be highlighted that Google is aware of a public exploit that exists in the wild for CVE-2023-4863.
Vulnerabilities
- CVE-2023-4863
- CVE-2023-4900
- CVE-2023-4901
- CVE-2023-4902
- CVE-2023-4903
- CVE-2023-4904
- CVE-2023-4905
- CVE-2023-4906
- CVE-2023-4907
- CVE-2023-4908
- CVE-2023-4909
Mitigations
The enterprise should deploy this patch as soon as the testing phase is completed.