- 74/2023
- High
Google has released an updated Chrome version (111.0.5563.110/.111) for Windows and (111.0.5563.110) for Linux and Mac to fix multiple vulnerabilities.
The addressed vulnerabilities could allow the remote attacker to execute arbitrary code on the system, cause a denial of service or trigger a buffer overflow by persuading the victim to visit a specially crafted webpage on the affected system.
Sample of the addressed vulnerabilities:
Google Chrome Code Execution Vulnerability (CVE-2023-1529):
• CVSS: 8.8
• Attack Vector: Network
• Attack Complexity: Low
• Privileges Required: None
• User Interaction: Required
• Consequences: Gain Access
Vulnerabilities
• CVE-2023-1528
• CVE-2023-1529
• CVE-2023-1530
• CVE-2023-1531
• CVE-2023-1532
• CVE-2023-1533
• CVE-2023-1534
Mitigations
The enterprise should deploy this patch as soon as the testing phase is completed.