Google Chrome Security Update – 28 September 2023

By /
  • 242/2023
  • High

Google has released an updated Chrome version (117.0.5938.132) for Windows, Linux, and Mac to fix several vulnerabilities.

The addressed vulnerabilities could allow the remote attacker to execute arbitrary code, and gain access to the affected system by persuading the victim to visit a specially-crafted website.

Sample of the addressed vulnerabilities:

Google Chrome Heap Buffer Overflow Vulnerability (CVE-2023-5217):

  • CVSS: 8.8
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: Required
  • Consequences: Gain Access

It should be highlighted that Google is aware of a public exploit that exists in the wild for CVE-2023-5217.

Vulnerabilities
  • CVE-2023-5186
  • CVE-2023-5187
  • CVE-2023-5217
Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Google Chrome Security Update

References

Google Chrome Security Update