csaf_opensuse - opensuse-su-2023:0068-1

Vulnerability from csaf_opensuse

Published

2023-03-13 17:04

Modified

2023-03-13 17:04

Summary

Security update for chromium

Notes

Title of the patch

Security update for chromium

Description of the patch

This update for chromium fixes the following issues: Chromium 111.0.5563.64 * New View Transitions API * CSS Color Level 4 * New developer tools in style panel for color functionality * CSS added trigonometric functions, additional root font units and extended the n-th child pseudo selector. * previousslide and nextslide actions are now part of the Media Session API * A number of security fixes (boo#1209040) * CVE-2023-1213: Use after free in Swiftshader * CVE-2023-1214: Type Confusion in V8 * CVE-2023-1215: Type Confusion in CSS * CVE-2023-1216: Use after free in DevTools * CVE-2023-1217: Stack buffer overflow in Crash reporting * CVE-2023-1218: Use after free in WebRTC * CVE-2023-1219: Heap buffer overflow in Metrics * CVE-2023-1220: Heap buffer overflow in UMA * CVE-2023-1221: Insufficient policy enforcement in Extensions API * CVE-2023-1222: Heap buffer overflow in Web Audio API * CVE-2023-1223: Insufficient policy enforcement in Autofill * CVE-2023-1224: Insufficient policy enforcement in Web Payments API * CVE-2023-1225: Insufficient policy enforcement in Navigation * CVE-2023-1226: Insufficient policy enforcement in Web Payments API * CVE-2023-1227: Use after free in Core * CVE-2023-1228: Insufficient policy enforcement in Intents * CVE-2023-1229: Inappropriate implementation in Permission prompts * CVE-2023-1230: Inappropriate implementation in WebApp Installs * CVE-2023-1231: Inappropriate implementation in Autofill * CVE-2023-1232: Insufficient policy enforcement in Resource Timing * CVE-2023-1233: Insufficient policy enforcement in Resource Timing * CVE-2023-1234: Inappropriate implementation in Intents * CVE-2023-1235: Type Confusion in DevTools * CVE-2023-1236: Inappropriate implementation in Internals

Patchnames

openSUSE-2023-68

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
   document: {
      aggregate_severity: {
         namespace: "https://www.suse.com/support/security/rating/",
         text: "important",
      },
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      distribution: {
         text: "Copyright 2024 SUSE LLC. All rights reserved.",
         tlp: {
            label: "WHITE",
            url: "https://www.first.org/tlp/",
         },
      },
      lang: "en",
      notes: [
         {
            category: "summary",
            text: "Security update for chromium",
            title: "Title of the patch",
         },
         {
            category: "description",
            text: "This update for chromium fixes the following issues:\n\nChromium 111.0.5563.64\n\n* New View Transitions API\n* CSS Color Level 4\n* New developer tools in style panel for color functionality\n* CSS added trigonometric functions, additional root font units\n  and extended the n-th child pseudo selector.\n* previousslide and nextslide actions are now part of the Media\n  Session API\n* A number of security fixes (boo#1209040)\n* CVE-2023-1213: Use after free in Swiftshader\n* CVE-2023-1214: Type Confusion in V8\n* CVE-2023-1215: Type Confusion in CSS\n* CVE-2023-1216: Use after free in DevTools\n* CVE-2023-1217: Stack buffer overflow in Crash reporting\n* CVE-2023-1218: Use after free in WebRTC\n* CVE-2023-1219: Heap buffer overflow in Metrics\n* CVE-2023-1220: Heap buffer overflow in UMA\n* CVE-2023-1221: Insufficient policy enforcement in Extensions API\n* CVE-2023-1222: Heap buffer overflow in Web Audio API\n* CVE-2023-1223: Insufficient policy enforcement in Autofill\n* CVE-2023-1224: Insufficient policy enforcement in Web Payments API\n* CVE-2023-1225: Insufficient policy enforcement in Navigation\n* CVE-2023-1226: Insufficient policy enforcement in Web Payments API\n* CVE-2023-1227: Use after free in Core\n* CVE-2023-1228: Insufficient policy enforcement in Intents\n* CVE-2023-1229: Inappropriate implementation in Permission prompts\n* CVE-2023-1230: Inappropriate implementation in WebApp Installs\n* CVE-2023-1231: Inappropriate implementation in Autofill\n* CVE-2023-1232: Insufficient policy enforcement in Resource Timing\n* CVE-2023-1233: Insufficient policy enforcement in Resource Timing\n* CVE-2023-1234: Inappropriate implementation in Intents\n* CVE-2023-1235: Type Confusion in DevTools\n* CVE-2023-1236: Inappropriate implementation in Internals\n",
            title: "Description of the patch",
         },
         {
            category: "details",
            text: "openSUSE-2023-68",
            title: "Patchnames",
         },
         {
            category: "legal_disclaimer",
            text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
            title: "Terms of use",
         },
      ],
      publisher: {
         category: "vendor",
         contact_details: "https://www.suse.com/support/security/contact/",
         name: "SUSE Product Security Team",
         namespace: "https://www.suse.com/",
      },
      references: [
         {
            category: "external",
            summary: "SUSE ratings",
            url: "https://www.suse.com/support/security/rating/",
         },
         {
            category: "self",
            summary: "URL of this CSAF notice",
            url: "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2023_0068-1.json",
         },
         {
            category: "self",
            summary: "URL for openSUSE-SU-2023:0068-1",
            url: "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/E4USJJ6HOC5UIZQM6PHWKEVPCFAFN3DO/",
         },
         {
            category: "self",
            summary: "E-Mail link for openSUSE-SU-2023:0068-1",
            url: "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/E4USJJ6HOC5UIZQM6PHWKEVPCFAFN3DO/",
         },
         {
            category: "self",
            summary: "SUSE Bug 1209040",
            url: "https://bugzilla.suse.com/1209040",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-1213 page",
            url: "https://www.suse.com/security/cve/CVE-2023-1213/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-1214 page",
            url: "https://www.suse.com/security/cve/CVE-2023-1214/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-1215 page",
            url: "https://www.suse.com/security/cve/CVE-2023-1215/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-1216 page",
            url: "https://www.suse.com/security/cve/CVE-2023-1216/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-1217 page",
            url: "https://www.suse.com/security/cve/CVE-2023-1217/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-1218 page",
            url: "https://www.suse.com/security/cve/CVE-2023-1218/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-1219 page",
            url: "https://www.suse.com/security/cve/CVE-2023-1219/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-1220 page",
            url: "https://www.suse.com/security/cve/CVE-2023-1220/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-1221 page",
            url: "https://www.suse.com/security/cve/CVE-2023-1221/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-1222 page",
            url: "https://www.suse.com/security/cve/CVE-2023-1222/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-1223 page",
            url: "https://www.suse.com/security/cve/CVE-2023-1223/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-1224 page",
            url: "https://www.suse.com/security/cve/CVE-2023-1224/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-1225 page",
            url: "https://www.suse.com/security/cve/CVE-2023-1225/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-1226 page",
            url: "https://www.suse.com/security/cve/CVE-2023-1226/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-1227 page",
            url: "https://www.suse.com/security/cve/CVE-2023-1227/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-1228 page",
            url: "https://www.suse.com/security/cve/CVE-2023-1228/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-1229 page",
            url: "https://www.suse.com/security/cve/CVE-2023-1229/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-1230 page",
            url: "https://www.suse.com/security/cve/CVE-2023-1230/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-1231 page",
            url: "https://www.suse.com/security/cve/CVE-2023-1231/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-1232 page",
            url: "https://www.suse.com/security/cve/CVE-2023-1232/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-1233 page",
            url: "https://www.suse.com/security/cve/CVE-2023-1233/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-1234 page",
            url: "https://www.suse.com/security/cve/CVE-2023-1234/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-1235 page",
            url: "https://www.suse.com/security/cve/CVE-2023-1235/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-1236 page",
            url: "https://www.suse.com/security/cve/CVE-2023-1236/",
         },
      ],
      title: "Security update for chromium",
      tracking: {
         current_release_date: "2023-03-13T17:04:22Z",
         generator: {
            date: "2023-03-13T17:04:22Z",
            engine: {
               name: "cve-database.git:bin/generate-csaf.pl",
               version: "1",
            },
         },
         id: "openSUSE-SU-2023:0068-1",
         initial_release_date: "2023-03-13T17:04:22Z",
         revision_history: [
            {
               date: "2023-03-13T17:04:22Z",
               number: "1",
               summary: "Current version",
            },
         ],
         status: "final",
         version: "1",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                        product: {
                           name: "chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                           product_id: "chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                        product: {
                           name: "chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                           product_id: "chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "aarch64",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                        product: {
                           name: "chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                           product_id: "chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "chromium-111.0.5563.64-bp154.2.73.1.x86_64",
                        product: {
                           name: "chromium-111.0.5563.64-bp154.2.73.1.x86_64",
                           product_id: "chromium-111.0.5563.64-bp154.2.73.1.x86_64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "x86_64",
               },
               {
                  branches: [
                     {
                        category: "product_name",
                        name: "SUSE Package Hub 15 SP4",
                        product: {
                           name: "SUSE Package Hub 15 SP4",
                           product_id: "SUSE Package Hub 15 SP4",
                        },
                     },
                     {
                        category: "product_name",
                        name: "openSUSE Leap 15.4",
                        product: {
                           name: "openSUSE Leap 15.4",
                           product_id: "openSUSE Leap 15.4",
                           product_identification_helper: {
                              cpe: "cpe:/o:opensuse:leap:15.4",
                           },
                        },
                     },
                  ],
                  category: "product_family",
                  name: "SUSE Linux Enterprise",
               },
            ],
            category: "vendor",
            name: "SUSE",
         },
      ],
      relationships: [
         {
            category: "default_component_of",
            full_product_name: {
               name: "chromedriver-111.0.5563.64-bp154.2.73.1.aarch64 as component of SUSE Package Hub 15 SP4",
               product_id: "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
            },
            product_reference: "chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
            relates_to_product_reference: "SUSE Package Hub 15 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "chromedriver-111.0.5563.64-bp154.2.73.1.x86_64 as component of SUSE Package Hub 15 SP4",
               product_id: "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
            },
            product_reference: "chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
            relates_to_product_reference: "SUSE Package Hub 15 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "chromium-111.0.5563.64-bp154.2.73.1.aarch64 as component of SUSE Package Hub 15 SP4",
               product_id: "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
            },
            product_reference: "chromium-111.0.5563.64-bp154.2.73.1.aarch64",
            relates_to_product_reference: "SUSE Package Hub 15 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "chromium-111.0.5563.64-bp154.2.73.1.x86_64 as component of SUSE Package Hub 15 SP4",
               product_id: "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
            },
            product_reference: "chromium-111.0.5563.64-bp154.2.73.1.x86_64",
            relates_to_product_reference: "SUSE Package Hub 15 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "chromedriver-111.0.5563.64-bp154.2.73.1.aarch64 as component of openSUSE Leap 15.4",
               product_id: "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
            },
            product_reference: "chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
            relates_to_product_reference: "openSUSE Leap 15.4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "chromedriver-111.0.5563.64-bp154.2.73.1.x86_64 as component of openSUSE Leap 15.4",
               product_id: "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
            },
            product_reference: "chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
            relates_to_product_reference: "openSUSE Leap 15.4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "chromium-111.0.5563.64-bp154.2.73.1.aarch64 as component of openSUSE Leap 15.4",
               product_id: "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
            },
            product_reference: "chromium-111.0.5563.64-bp154.2.73.1.aarch64",
            relates_to_product_reference: "openSUSE Leap 15.4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "chromium-111.0.5563.64-bp154.2.73.1.x86_64 as component of openSUSE Leap 15.4",
               product_id: "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
            },
            product_reference: "chromium-111.0.5563.64-bp154.2.73.1.x86_64",
            relates_to_product_reference: "openSUSE Leap 15.4",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2023-1213",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-1213",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Use after free in Swiftshader in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
               "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
               "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
               "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
               "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
               "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
               "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
               "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-1213",
               url: "https://www.suse.com/security/cve/CVE-2023-1213",
            },
            {
               category: "external",
               summary: "SUSE Bug 1209040 for CVE-2023-1213",
               url: "https://bugzilla.suse.com/1209040",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2023-03-13T17:04:22Z",
               details: "important",
            },
         ],
         title: "CVE-2023-1213",
      },
      {
         cve: "CVE-2023-1214",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-1214",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Type confusion in V8 in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
               "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
               "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
               "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
               "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
               "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
               "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
               "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-1214",
               url: "https://www.suse.com/security/cve/CVE-2023-1214",
            },
            {
               category: "external",
               summary: "SUSE Bug 1209040 for CVE-2023-1214",
               url: "https://bugzilla.suse.com/1209040",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2023-03-13T17:04:22Z",
               details: "important",
            },
         ],
         title: "CVE-2023-1214",
      },
      {
         cve: "CVE-2023-1215",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-1215",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Type confusion in CSS in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
               "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
               "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
               "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
               "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
               "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
               "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
               "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-1215",
               url: "https://www.suse.com/security/cve/CVE-2023-1215",
            },
            {
               category: "external",
               summary: "SUSE Bug 1209040 for CVE-2023-1215",
               url: "https://bugzilla.suse.com/1209040",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2023-03-13T17:04:22Z",
               details: "important",
            },
         ],
         title: "CVE-2023-1215",
      },
      {
         cve: "CVE-2023-1216",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-1216",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Use after free in DevTools in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had convienced the user to engage in direct UI interaction to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
               "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
               "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
               "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
               "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
               "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
               "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
               "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-1216",
               url: "https://www.suse.com/security/cve/CVE-2023-1216",
            },
            {
               category: "external",
               summary: "SUSE Bug 1209040 for CVE-2023-1216",
               url: "https://bugzilla.suse.com/1209040",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2023-03-13T17:04:22Z",
               details: "important",
            },
         ],
         title: "CVE-2023-1216",
      },
      {
         cve: "CVE-2023-1217",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-1217",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Stack buffer overflow in Crash reporting in Google Chrome on Windows prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
               "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
               "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
               "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
               "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
               "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
               "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
               "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-1217",
               url: "https://www.suse.com/security/cve/CVE-2023-1217",
            },
            {
               category: "external",
               summary: "SUSE Bug 1209040 for CVE-2023-1217",
               url: "https://bugzilla.suse.com/1209040",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2023-03-13T17:04:22Z",
               details: "important",
            },
         ],
         title: "CVE-2023-1217",
      },
      {
         cve: "CVE-2023-1218",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-1218",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Use after free in WebRTC in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
               "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
               "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
               "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
               "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
               "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
               "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
               "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-1218",
               url: "https://www.suse.com/security/cve/CVE-2023-1218",
            },
            {
               category: "external",
               summary: "SUSE Bug 1209040 for CVE-2023-1218",
               url: "https://bugzilla.suse.com/1209040",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2023-03-13T17:04:22Z",
               details: "important",
            },
         ],
         title: "CVE-2023-1218",
      },
      {
         cve: "CVE-2023-1219",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-1219",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Heap buffer overflow in Metrics in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
               "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
               "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
               "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
               "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
               "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
               "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
               "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-1219",
               url: "https://www.suse.com/security/cve/CVE-2023-1219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1209040 for CVE-2023-1219",
               url: "https://bugzilla.suse.com/1209040",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2023-03-13T17:04:22Z",
               details: "important",
            },
         ],
         title: "CVE-2023-1219",
      },
      {
         cve: "CVE-2023-1220",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-1220",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Heap buffer overflow in UMA in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
               "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
               "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
               "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
               "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
               "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
               "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
               "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-1220",
               url: "https://www.suse.com/security/cve/CVE-2023-1220",
            },
            {
               category: "external",
               summary: "SUSE Bug 1209040 for CVE-2023-1220",
               url: "https://bugzilla.suse.com/1209040",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2023-03-13T17:04:22Z",
               details: "important",
            },
         ],
         title: "CVE-2023-1220",
      },
      {
         cve: "CVE-2023-1221",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-1221",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Insufficient policy enforcement in Extensions API in Google Chrome prior to 111.0.5563.64 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension. (Chromium security severity: Medium)",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
               "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
               "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
               "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
               "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
               "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
               "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
               "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-1221",
               url: "https://www.suse.com/security/cve/CVE-2023-1221",
            },
            {
               category: "external",
               summary: "SUSE Bug 1209040 for CVE-2023-1221",
               url: "https://bugzilla.suse.com/1209040",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2023-03-13T17:04:22Z",
               details: "important",
            },
         ],
         title: "CVE-2023-1221",
      },
      {
         cve: "CVE-2023-1222",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-1222",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Heap buffer overflow in Web Audio API in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
               "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
               "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
               "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
               "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
               "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
               "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
               "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-1222",
               url: "https://www.suse.com/security/cve/CVE-2023-1222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1209040 for CVE-2023-1222",
               url: "https://bugzilla.suse.com/1209040",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2023-03-13T17:04:22Z",
               details: "important",
            },
         ],
         title: "CVE-2023-1222",
      },
      {
         cve: "CVE-2023-1223",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-1223",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Insufficient policy enforcement in Autofill in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
               "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
               "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
               "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
               "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
               "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
               "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
               "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-1223",
               url: "https://www.suse.com/security/cve/CVE-2023-1223",
            },
            {
               category: "external",
               summary: "SUSE Bug 1209040 for CVE-2023-1223",
               url: "https://bugzilla.suse.com/1209040",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2023-03-13T17:04:22Z",
               details: "important",
            },
         ],
         title: "CVE-2023-1223",
      },
      {
         cve: "CVE-2023-1224",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-1224",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Insufficient policy enforcement in Web Payments API in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
               "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
               "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
               "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
               "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
               "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
               "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
               "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-1224",
               url: "https://www.suse.com/security/cve/CVE-2023-1224",
            },
            {
               category: "external",
               summary: "SUSE Bug 1209040 for CVE-2023-1224",
               url: "https://bugzilla.suse.com/1209040",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2023-03-13T17:04:22Z",
               details: "important",
            },
         ],
         title: "CVE-2023-1224",
      },
      {
         cve: "CVE-2023-1225",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-1225",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Insufficient policy enforcement in Navigation in Google Chrome on iOS prior to 111.0.5563.64 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
               "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
               "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
               "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
               "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
               "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
               "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
               "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-1225",
               url: "https://www.suse.com/security/cve/CVE-2023-1225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1209040 for CVE-2023-1225",
               url: "https://bugzilla.suse.com/1209040",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2023-03-13T17:04:22Z",
               details: "important",
            },
         ],
         title: "CVE-2023-1225",
      },
      {
         cve: "CVE-2023-1226",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-1226",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Insufficient policy enforcement in Web Payments API in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Medium)",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
               "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
               "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
               "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
               "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
               "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
               "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
               "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-1226",
               url: "https://www.suse.com/security/cve/CVE-2023-1226",
            },
            {
               category: "external",
               summary: "SUSE Bug 1209040 for CVE-2023-1226",
               url: "https://bugzilla.suse.com/1209040",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2023-03-13T17:04:22Z",
               details: "important",
            },
         ],
         title: "CVE-2023-1226",
      },
      {
         cve: "CVE-2023-1227",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-1227",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Use after free in Core in Google Chrome on Lacros prior to 111.0.5563.64 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via crafted UI interaction. (Chromium security severity: Medium)",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
               "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
               "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
               "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
               "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
               "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
               "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
               "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-1227",
               url: "https://www.suse.com/security/cve/CVE-2023-1227",
            },
            {
               category: "external",
               summary: "SUSE Bug 1209040 for CVE-2023-1227",
               url: "https://bugzilla.suse.com/1209040",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2023-03-13T17:04:22Z",
               details: "important",
            },
         ],
         title: "CVE-2023-1227",
      },
      {
         cve: "CVE-2023-1228",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-1228",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Insufficient policy enforcement in Intents in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
               "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
               "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
               "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
               "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
               "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
               "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
               "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-1228",
               url: "https://www.suse.com/security/cve/CVE-2023-1228",
            },
            {
               category: "external",
               summary: "SUSE Bug 1209040 for CVE-2023-1228",
               url: "https://bugzilla.suse.com/1209040",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2023-03-13T17:04:22Z",
               details: "important",
            },
         ],
         title: "CVE-2023-1228",
      },
      {
         cve: "CVE-2023-1229",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-1229",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Inappropriate implementation in Permission prompts in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
               "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
               "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
               "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
               "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
               "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
               "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
               "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-1229",
               url: "https://www.suse.com/security/cve/CVE-2023-1229",
            },
            {
               category: "external",
               summary: "SUSE Bug 1209040 for CVE-2023-1229",
               url: "https://bugzilla.suse.com/1209040",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2023-03-13T17:04:22Z",
               details: "important",
            },
         ],
         title: "CVE-2023-1229",
      },
      {
         cve: "CVE-2023-1230",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-1230",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Inappropriate implementation in WebApp Installs in Google Chrome on Android prior to 111.0.5563.64 allowed an attacker who convinced a user to install a malicious WebApp to spoof the contents of the PWA installer via a crafted HTML page. (Chromium security severity: Medium)",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
               "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
               "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
               "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
               "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
               "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
               "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
               "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-1230",
               url: "https://www.suse.com/security/cve/CVE-2023-1230",
            },
            {
               category: "external",
               summary: "SUSE Bug 1209040 for CVE-2023-1230",
               url: "https://bugzilla.suse.com/1209040",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2023-03-13T17:04:22Z",
               details: "important",
            },
         ],
         title: "CVE-2023-1230",
      },
      {
         cve: "CVE-2023-1231",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-1231",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Inappropriate implementation in Autofill in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to potentially spoof the contents of the omnibox via a crafted HTML page. (Chromium security severity: Medium)",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
               "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
               "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
               "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
               "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
               "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
               "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
               "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-1231",
               url: "https://www.suse.com/security/cve/CVE-2023-1231",
            },
            {
               category: "external",
               summary: "SUSE Bug 1209040 for CVE-2023-1231",
               url: "https://bugzilla.suse.com/1209040",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2023-03-13T17:04:22Z",
               details: "important",
            },
         ],
         title: "CVE-2023-1231",
      },
      {
         cve: "CVE-2023-1232",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-1232",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Insufficient policy enforcement in Resource Timing in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to obtain potentially sensitive information from API via a crafted HTML page. (Chromium security severity: Low)",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
               "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
               "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
               "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
               "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
               "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
               "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
               "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-1232",
               url: "https://www.suse.com/security/cve/CVE-2023-1232",
            },
            {
               category: "external",
               summary: "SUSE Bug 1209040 for CVE-2023-1232",
               url: "https://bugzilla.suse.com/1209040",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2023-03-13T17:04:22Z",
               details: "important",
            },
         ],
         title: "CVE-2023-1232",
      },
      {
         cve: "CVE-2023-1233",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-1233",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Insufficient policy enforcement in Resource Timing in Google Chrome prior to 111.0.5563.64 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from API via a crafted Chrome Extension. (Chromium security severity: Low)",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
               "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
               "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
               "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
               "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
               "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
               "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
               "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-1233",
               url: "https://www.suse.com/security/cve/CVE-2023-1233",
            },
            {
               category: "external",
               summary: "SUSE Bug 1209040 for CVE-2023-1233",
               url: "https://bugzilla.suse.com/1209040",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2023-03-13T17:04:22Z",
               details: "important",
            },
         ],
         title: "CVE-2023-1233",
      },
      {
         cve: "CVE-2023-1234",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-1234",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Inappropriate implementation in Intents in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security severity: Low)",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
               "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
               "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
               "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
               "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
               "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
               "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
               "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-1234",
               url: "https://www.suse.com/security/cve/CVE-2023-1234",
            },
            {
               category: "external",
               summary: "SUSE Bug 1209040 for CVE-2023-1234",
               url: "https://bugzilla.suse.com/1209040",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2023-03-13T17:04:22Z",
               details: "important",
            },
         ],
         title: "CVE-2023-1234",
      },
      {
         cve: "CVE-2023-1235",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-1235",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Type confusion in DevTools in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted UI interaction. (Chromium security severity: Low)",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
               "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
               "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
               "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
               "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
               "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
               "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
               "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-1235",
               url: "https://www.suse.com/security/cve/CVE-2023-1235",
            },
            {
               category: "external",
               summary: "SUSE Bug 1209040 for CVE-2023-1235",
               url: "https://bugzilla.suse.com/1209040",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
                  version: "3.1",
               },
               products: [
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2023-03-13T17:04:22Z",
               details: "important",
            },
         ],
         title: "CVE-2023-1235",
      },
      {
         cve: "CVE-2023-1236",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-1236",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Inappropriate implementation in Internals in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to spoof the origin of an iframe via a crafted HTML page. (Chromium security severity: Low)",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
               "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
               "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
               "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
               "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
               "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
               "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
               "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-1236",
               url: "https://www.suse.com/security/cve/CVE-2023-1236",
            },
            {
               category: "external",
               summary: "SUSE Bug 1209040 for CVE-2023-1236",
               url: "https://bugzilla.suse.com/1209040",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "SUSE Package Hub 15 SP4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromedriver-111.0.5563.64-bp154.2.73.1.x86_64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.aarch64",
                  "openSUSE Leap 15.4:chromium-111.0.5563.64-bp154.2.73.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2023-03-13T17:04:22Z",
               details: "important",
            },
         ],
         title: "CVE-2023-1236",
      },
   ],
}

CVE-2023-1213 (GCVE-0-2023-1213)

Vulnerability from cvelistv5

Published

2023-03-07 21:42

Modified

2024-10-17 19:25

Severity ?

8.8 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Summary

Use after free in Swiftshader in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

References

▼	URL	Tags
	https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html
	https://crbug.com/1411210

Impacted products

	Vendor	Product	Version
	Google	Chrome	Version: 111.0.5563.64 < 111.0.5563.64

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T05:40:59.852Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://crbug.com/1411210",
               },
            ],
            title: "CVE Program Container",
         },
         {
            affected: [
               {
                  cpes: [
                     "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
                  ],
                  defaultStatus: "unknown",
                  product: "chrome",
                  vendor: "google",
                  versions: [
                     {
                        lessThan: "111.0.5563.64",
                        status: "affected",
                        version: "0",
                        versionType: "custom",
                     },
                  ],
               },
            ],
            metrics: [
               {
                  cvssV3_1: {
                     attackComplexity: "LOW",
                     attackVector: "NETWORK",
                     availabilityImpact: "HIGH",
                     baseScore: 8.8,
                     baseSeverity: "HIGH",
                     confidentialityImpact: "HIGH",
                     integrityImpact: "HIGH",
                     privilegesRequired: "NONE",
                     scope: "UNCHANGED",
                     userInteraction: "REQUIRED",
                     vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                     version: "3.1",
                  },
               },
               {
                  other: {
                     content: {
                        id: "CVE-2023-1213",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "total",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-10-17T19:24:54.345552Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            problemTypes: [
               {
                  descriptions: [
                     {
                        cweId: "CWE-416",
                        description: "CWE-416 Use After Free",
                        lang: "en",
                        type: "CWE",
                     },
                  ],
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-10-17T19:25:52.336Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "Chrome",
               vendor: "Google",
               versions: [
                  {
                     lessThan: "111.0.5563.64",
                     status: "affected",
                     version: "111.0.5563.64",
                     versionType: "custom",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Use after free in Swiftshader in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Use after free",
                     lang: "en",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2023-03-07T21:42:15.723Z",
            orgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
            shortName: "Chrome",
         },
         references: [
            {
               url: "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
            },
            {
               url: "https://crbug.com/1411210",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
      assignerShortName: "Chrome",
      cveId: "CVE-2023-1213",
      datePublished: "2023-03-07T21:42:15.723Z",
      dateReserved: "2023-03-07T00:41:16.753Z",
      dateUpdated: "2024-10-17T19:25:52.336Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

CVE-2023-1227 (GCVE-0-2023-1227)

Vulnerability from cvelistv5

Published

2023-03-07 21:42

Modified

2024-10-10 18:36

Severity ?

8.8 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Summary

Use after free in Core in Google Chrome on Lacros prior to 111.0.5563.64 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via crafted UI interaction. (Chromium security severity: Medium)

References

▼	URL	Tags
	https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html
	https://crbug.com/1348791

Impacted products

	Vendor	Product	Version
	Google	Chrome	Version: 111.0.5563.64 < 111.0.5563.64

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T05:40:59.747Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://crbug.com/1348791",
               },
            ],
            title: "CVE Program Container",
         },
         {
            affected: [
               {
                  cpes: [
                     "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
                  ],
                  defaultStatus: "unknown",
                  product: "chrome",
                  vendor: "google",
                  versions: [
                     {
                        lessThan: "111.0.5563.64",
                        status: "affected",
                        version: "0",
                        versionType: "custom",
                     },
                  ],
               },
            ],
            metrics: [
               {
                  cvssV3_1: {
                     attackComplexity: "LOW",
                     attackVector: "NETWORK",
                     availabilityImpact: "HIGH",
                     baseScore: 8.8,
                     baseSeverity: "HIGH",
                     confidentialityImpact: "HIGH",
                     integrityImpact: "HIGH",
                     privilegesRequired: "NONE",
                     scope: "UNCHANGED",
                     userInteraction: "REQUIRED",
                     vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                     version: "3.1",
                  },
               },
               {
                  other: {
                     content: {
                        id: "CVE-2023-1227",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "total",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-10-10T18:32:35.311929Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            problemTypes: [
               {
                  descriptions: [
                     {
                        cweId: "CWE-416",
                        description: "CWE-416 Use After Free",
                        lang: "en",
                        type: "CWE",
                     },
                  ],
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-10-10T18:36:37.229Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "Chrome",
               vendor: "Google",
               versions: [
                  {
                     lessThan: "111.0.5563.64",
                     status: "affected",
                     version: "111.0.5563.64",
                     versionType: "custom",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Use after free in Core in Google Chrome on Lacros prior to 111.0.5563.64 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via crafted UI interaction. (Chromium security severity: Medium)",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Use after free",
                     lang: "en",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2023-03-07T21:42:18.106Z",
            orgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
            shortName: "Chrome",
         },
         references: [
            {
               url: "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
            },
            {
               url: "https://crbug.com/1348791",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
      assignerShortName: "Chrome",
      cveId: "CVE-2023-1227",
      datePublished: "2023-03-07T21:42:18.106Z",
      dateReserved: "2023-03-07T00:41:19.021Z",
      dateUpdated: "2024-10-10T18:36:37.229Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

CVE-2023-1234 (GCVE-0-2023-1234)

Vulnerability from cvelistv5

Published

2023-03-07 21:42

Modified

2024-10-10 19:22

Severity ?

Summary

Inappropriate implementation in Intents in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security severity: Low)

References

▼	URL	Tags
	https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html
	https://crbug.com/1404621

Impacted products

	Vendor	Product	Version
	Google	Chrome	Version: 111.0.5563.64 < 111.0.5563.64

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T05:40:59.450Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://crbug.com/1404621",
               },
            ],
            title: "CVE Program Container",
         },
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2023-1234",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-10-10T19:22:16.591175Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-10-10T19:22:34.513Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "Chrome",
               vendor: "Google",
               versions: [
                  {
                     lessThan: "111.0.5563.64",
                     status: "affected",
                     version: "111.0.5563.64",
                     versionType: "custom",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Inappropriate implementation in Intents in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security severity: Low)",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Inappropriate implementation",
                     lang: "en",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2023-03-07T21:42:19.132Z",
            orgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
            shortName: "Chrome",
         },
         references: [
            {
               url: "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
            },
            {
               url: "https://crbug.com/1404621",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
      assignerShortName: "Chrome",
      cveId: "CVE-2023-1234",
      datePublished: "2023-03-07T21:42:19.132Z",
      dateReserved: "2023-03-07T00:41:20.058Z",
      dateUpdated: "2024-10-10T19:22:34.513Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

CVE-2023-1222 (GCVE-0-2023-1222)

Vulnerability from cvelistv5

Published

2023-03-07 21:42

Modified

2024-10-10 18:09

Severity ?

8.8 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Summary

Heap buffer overflow in Web Audio API in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

References

▼	URL	Tags
	https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html
	https://crbug.com/1403515

Impacted products

	Vendor	Product	Version
	Google	Chrome	Version: 111.0.5563.64 < 111.0.5563.64

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T05:40:59.871Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://crbug.com/1403515",
               },
            ],
            title: "CVE Program Container",
         },
         {
            affected: [
               {
                  cpes: [
                     "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
                  ],
                  defaultStatus: "unknown",
                  product: "chrome",
                  vendor: "google",
                  versions: [
                     {
                        lessThan: "111.0.5563.64",
                        status: "affected",
                        version: "0",
                        versionType: "custom",
                     },
                  ],
               },
            ],
            metrics: [
               {
                  cvssV3_1: {
                     attackComplexity: "LOW",
                     attackVector: "NETWORK",
                     availabilityImpact: "HIGH",
                     baseScore: 8.8,
                     baseSeverity: "HIGH",
                     confidentialityImpact: "HIGH",
                     integrityImpact: "HIGH",
                     privilegesRequired: "NONE",
                     scope: "UNCHANGED",
                     userInteraction: "REQUIRED",
                     vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                     version: "3.1",
                  },
               },
               {
                  other: {
                     content: {
                        id: "CVE-2023-1222",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "total",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-10-10T18:05:32.860524Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            problemTypes: [
               {
                  descriptions: [
                     {
                        cweId: "CWE-787",
                        description: "CWE-787 Out-of-bounds Write",
                        lang: "en",
                        type: "CWE",
                     },
                  ],
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-10-10T18:09:53.887Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "Chrome",
               vendor: "Google",
               versions: [
                  {
                     lessThan: "111.0.5563.64",
                     status: "affected",
                     version: "111.0.5563.64",
                     versionType: "custom",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Heap buffer overflow in Web Audio API in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Heap buffer overflow",
                     lang: "en",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2023-03-07T21:42:17.341Z",
            orgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
            shortName: "Chrome",
         },
         references: [
            {
               url: "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
            },
            {
               url: "https://crbug.com/1403515",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
      assignerShortName: "Chrome",
      cveId: "CVE-2023-1222",
      datePublished: "2023-03-07T21:42:17.341Z",
      dateReserved: "2023-03-07T00:41:18.210Z",
      dateUpdated: "2024-10-10T18:09:53.887Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

CVE-2023-1232 (GCVE-0-2023-1232)

Vulnerability from cvelistv5

Published

2023-03-07 21:42

Modified

2024-10-10 19:18

Severity ?

Summary

Insufficient policy enforcement in Resource Timing in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to obtain potentially sensitive information from API via a crafted HTML page. (Chromium security severity: Low)

References

▼	URL	Tags
	https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html
	https://crbug.com/1346924

Impacted products

	Vendor	Product	Version
	Google	Chrome	Version: 111.0.5563.64 < 111.0.5563.64

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T05:40:59.825Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://crbug.com/1346924",
               },
            ],
            title: "CVE Program Container",
         },
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2023-1232",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-10-10T19:18:11.103650Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-10-10T19:18:23.449Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "Chrome",
               vendor: "Google",
               versions: [
                  {
                     lessThan: "111.0.5563.64",
                     status: "affected",
                     version: "111.0.5563.64",
                     versionType: "custom",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Insufficient policy enforcement in Resource Timing in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to obtain potentially sensitive information from API via a crafted HTML page. (Chromium security severity: Low)",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Insufficient policy enforcement",
                     lang: "en",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2023-03-07T21:42:18.890Z",
            orgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
            shortName: "Chrome",
         },
         references: [
            {
               url: "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
            },
            {
               url: "https://crbug.com/1346924",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
      assignerShortName: "Chrome",
      cveId: "CVE-2023-1232",
      datePublished: "2023-03-07T21:42:18.890Z",
      dateReserved: "2023-03-07T00:41:19.809Z",
      dateUpdated: "2024-10-10T19:18:23.449Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

CVE-2023-1235 (GCVE-0-2023-1235)

Vulnerability from cvelistv5

Published

2023-03-07 21:42

Modified

2024-10-09 19:46

Severity ?

Summary

Type confusion in DevTools in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted UI interaction. (Chromium security severity: Low)

References

▼	URL	Tags
	https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html
	https://crbug.com/1404704

Impacted products

	Vendor	Product	Version
	Google	Chrome	Version: 111.0.5563.64 < 111.0.5563.64

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T05:40:59.710Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://crbug.com/1404704",
               },
            ],
            title: "CVE Program Container",
         },
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2023-1235",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-10-09T19:46:20.016417Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-10-09T19:46:53.687Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "Chrome",
               vendor: "Google",
               versions: [
                  {
                     lessThan: "111.0.5563.64",
                     status: "affected",
                     version: "111.0.5563.64",
                     versionType: "custom",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Type confusion in DevTools in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted UI interaction. (Chromium security severity: Low)",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Type Confusion",
                     lang: "en",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2023-03-07T21:42:19.250Z",
            orgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
            shortName: "Chrome",
         },
         references: [
            {
               url: "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
            },
            {
               url: "https://crbug.com/1404704",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
      assignerShortName: "Chrome",
      cveId: "CVE-2023-1235",
      datePublished: "2023-03-07T21:42:19.250Z",
      dateReserved: "2023-03-07T00:41:20.160Z",
      dateUpdated: "2024-10-09T19:46:53.687Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

CVE-2023-1230 (GCVE-0-2023-1230)

Vulnerability from cvelistv5

Published

2023-03-07 21:42

Modified

2024-10-09 17:02

Severity ?

Summary

Inappropriate implementation in WebApp Installs in Google Chrome on Android prior to 111.0.5563.64 allowed an attacker who convinced a user to install a malicious WebApp to spoof the contents of the PWA installer via a crafted HTML page. (Chromium security severity: Medium)

References

▼	URL	Tags
	https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html
	https://crbug.com/1404230

Impacted products

	Vendor	Product	Version
	Google	Chrome	Version: 111.0.5563.64 < 111.0.5563.64

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T05:40:59.872Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://crbug.com/1404230",
               },
            ],
            title: "CVE Program Container",
         },
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2023-1230",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-10-09T17:02:29.467746Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-10-09T17:02:49.349Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "Chrome",
               vendor: "Google",
               versions: [
                  {
                     lessThan: "111.0.5563.64",
                     status: "affected",
                     version: "111.0.5563.64",
                     versionType: "custom",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Inappropriate implementation in WebApp Installs in Google Chrome on Android prior to 111.0.5563.64 allowed an attacker who convinced a user to install a malicious WebApp to spoof the contents of the PWA installer via a crafted HTML page. (Chromium security severity: Medium)",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Inappropriate implementation",
                     lang: "en",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2023-03-07T21:42:18.627Z",
            orgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
            shortName: "Chrome",
         },
         references: [
            {
               url: "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
            },
            {
               url: "https://crbug.com/1404230",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
      assignerShortName: "Chrome",
      cveId: "CVE-2023-1230",
      datePublished: "2023-03-07T21:42:18.627Z",
      dateReserved: "2023-03-07T00:41:19.610Z",
      dateUpdated: "2024-10-09T17:02:49.349Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

CVE-2023-1215 (GCVE-0-2023-1215)

Vulnerability from cvelistv5

Published

2023-03-07 21:42

Modified

2024-10-17 19:53

Severity ?

8.8 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Summary

Type confusion in CSS in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

References

▼	URL	Tags
	https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html
	https://crbug.com/1417176

Impacted products

	Vendor	Product	Version
	Google	Chrome	Version: 111.0.5563.64 < 111.0.5563.64

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T05:40:59.779Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://crbug.com/1417176",
               },
            ],
            title: "CVE Program Container",
         },
         {
            affected: [
               {
                  cpes: [
                     "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
                  ],
                  defaultStatus: "unknown",
                  product: "chrome",
                  vendor: "google",
                  versions: [
                     {
                        lessThan: "111.0.5563.64",
                        status: "affected",
                        version: "0",
                        versionType: "custom",
                     },
                  ],
               },
            ],
            metrics: [
               {
                  cvssV3_1: {
                     attackComplexity: "LOW",
                     attackVector: "NETWORK",
                     availabilityImpact: "HIGH",
                     baseScore: 8.8,
                     baseSeverity: "HIGH",
                     confidentialityImpact: "HIGH",
                     integrityImpact: "HIGH",
                     privilegesRequired: "NONE",
                     scope: "UNCHANGED",
                     userInteraction: "REQUIRED",
                     vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                     version: "3.1",
                  },
               },
               {
                  other: {
                     content: {
                        id: "CVE-2023-1215",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "total",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-10-17T19:52:43.039531Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            problemTypes: [
               {
                  descriptions: [
                     {
                        cweId: "CWE-843",
                        description: "CWE-843 Access of Resource Using Incompatible Type ('Type Confusion')",
                        lang: "en",
                        type: "CWE",
                     },
                  ],
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-10-17T19:53:48.128Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "Chrome",
               vendor: "Google",
               versions: [
                  {
                     lessThan: "111.0.5563.64",
                     status: "affected",
                     version: "111.0.5563.64",
                     versionType: "custom",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Type confusion in CSS in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Type Confusion",
                     lang: "en",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2023-03-07T21:42:16.203Z",
            orgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
            shortName: "Chrome",
         },
         references: [
            {
               url: "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
            },
            {
               url: "https://crbug.com/1417176",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
      assignerShortName: "Chrome",
      cveId: "CVE-2023-1215",
      datePublished: "2023-03-07T21:42:16.203Z",
      dateReserved: "2023-03-07T00:41:17.315Z",
      dateUpdated: "2024-10-17T19:53:48.128Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

CVE-2023-1221 (GCVE-0-2023-1221)

Vulnerability from cvelistv5

Published

2023-03-07 21:42

Modified

2024-10-15 16:00

Severity ?

Summary

Insufficient policy enforcement in Extensions API in Google Chrome prior to 111.0.5563.64 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension. (Chromium security severity: Medium)

References

▼	URL	Tags
	https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html
	https://crbug.com/1385343

Impacted products

	Vendor	Product	Version
	Google	Chrome	Version: 111.0.5563.64 < 111.0.5563.64

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T05:40:59.889Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://crbug.com/1385343",
               },
            ],
            title: "CVE Program Container",
         },
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2023-1221",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-10-15T15:59:55.261374Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-10-15T16:00:07.576Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "Chrome",
               vendor: "Google",
               versions: [
                  {
                     lessThan: "111.0.5563.64",
                     status: "affected",
                     version: "111.0.5563.64",
                     versionType: "custom",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Insufficient policy enforcement in Extensions API in Google Chrome prior to 111.0.5563.64 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension. (Chromium security severity: Medium)",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Insufficient policy enforcement",
                     lang: "en",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2023-03-07T21:42:17.215Z",
            orgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
            shortName: "Chrome",
         },
         references: [
            {
               url: "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
            },
            {
               url: "https://crbug.com/1385343",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
      assignerShortName: "Chrome",
      cveId: "CVE-2023-1221",
      datePublished: "2023-03-07T21:42:17.215Z",
      dateReserved: "2023-03-07T00:41:18.110Z",
      dateUpdated: "2024-10-15T16:00:07.576Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

CVE-2023-1220 (GCVE-0-2023-1220)

Vulnerability from cvelistv5

Published

2023-03-07 21:42

Modified

2025-02-13 16:39

Severity ?

8.8 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Summary

Heap buffer overflow in UMA in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

References

▼	URL	Tags
	https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html
	https://crbug.com/1417185
	http://packetstormsecurity.com/files/171796/Chrome-base-SampleVectorBase-MoveSingleSampleToCounts-Heap-Buffer-Overflow.html

Impacted products

	Vendor	Product	Version
	Google	Chrome	Version: 111.0.5563.64 < 111.0.5563.64

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T05:40:59.873Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://crbug.com/1417185",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "http://packetstormsecurity.com/files/171796/Chrome-base-SampleVectorBase-MoveSingleSampleToCounts-Heap-Buffer-Overflow.html",
               },
            ],
            title: "CVE Program Container",
         },
         {
            affected: [
               {
                  cpes: [
                     "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
                  ],
                  defaultStatus: "unknown",
                  product: "chrome",
                  vendor: "google",
                  versions: [
                     {
                        lessThan: "111.0.5563.64",
                        status: "affected",
                        version: "0",
                        versionType: "custom",
                     },
                  ],
               },
            ],
            metrics: [
               {
                  cvssV3_1: {
                     attackComplexity: "LOW",
                     attackVector: "NETWORK",
                     availabilityImpact: "HIGH",
                     baseScore: 8.8,
                     baseSeverity: "HIGH",
                     confidentialityImpact: "HIGH",
                     integrityImpact: "HIGH",
                     privilegesRequired: "NONE",
                     scope: "UNCHANGED",
                     userInteraction: "REQUIRED",
                     vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                     version: "3.1",
                  },
               },
               {
                  other: {
                     content: {
                        id: "CVE-2023-1220",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "total",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-10-15T15:58:30.472947Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            problemTypes: [
               {
                  descriptions: [
                     {
                        cweId: "CWE-787",
                        description: "CWE-787 Out-of-bounds Write",
                        lang: "en",
                        type: "CWE",
                     },
                  ],
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-10-15T15:59:36.343Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "Chrome",
               vendor: "Google",
               versions: [
                  {
                     lessThan: "111.0.5563.64",
                     status: "affected",
                     version: "111.0.5563.64",
                     versionType: "custom",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Heap buffer overflow in UMA in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Heap buffer overflow",
                     lang: "en",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2023-04-10T19:06:27.614Z",
            orgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
            shortName: "Chrome",
         },
         references: [
            {
               url: "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
            },
            {
               url: "https://crbug.com/1417185",
            },
            {
               url: "http://packetstormsecurity.com/files/171796/Chrome-base-SampleVectorBase-MoveSingleSampleToCounts-Heap-Buffer-Overflow.html",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
      assignerShortName: "Chrome",
      cveId: "CVE-2023-1220",
      datePublished: "2023-03-07T21:42:17.093Z",
      dateReserved: "2023-03-07T00:41:17.967Z",
      dateUpdated: "2025-02-13T16:39:18.443Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

CVE-2023-1214 (GCVE-0-2023-1214)

Vulnerability from cvelistv5

Published

2023-03-07 21:42

Modified

2024-10-17 19:28

Severity ?

8.8 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Summary

Type confusion in V8 in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

References

▼	URL	Tags
	https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html
	https://crbug.com/1412487

Impacted products

	Vendor	Product	Version
	Google	Chrome	Version: 111.0.5563.64 < 111.0.5563.64

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T05:40:59.805Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://crbug.com/1412487",
               },
            ],
            title: "CVE Program Container",
         },
         {
            affected: [
               {
                  cpes: [
                     "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
                  ],
                  defaultStatus: "unknown",
                  product: "chrome",
                  vendor: "google",
                  versions: [
                     {
                        lessThan: "111.0.5563.64",
                        status: "affected",
                        version: "0",
                        versionType: "custom",
                     },
                  ],
               },
            ],
            metrics: [
               {
                  cvssV3_1: {
                     attackComplexity: "LOW",
                     attackVector: "NETWORK",
                     availabilityImpact: "HIGH",
                     baseScore: 8.8,
                     baseSeverity: "HIGH",
                     confidentialityImpact: "HIGH",
                     integrityImpact: "HIGH",
                     privilegesRequired: "NONE",
                     scope: "UNCHANGED",
                     userInteraction: "REQUIRED",
                     vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                     version: "3.1",
                  },
               },
               {
                  other: {
                     content: {
                        id: "CVE-2023-1214",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "total",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-10-17T19:27:18.446527Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            problemTypes: [
               {
                  descriptions: [
                     {
                        cweId: "CWE-843",
                        description: "CWE-843 Access of Resource Using Incompatible Type ('Type Confusion')",
                        lang: "en",
                        type: "CWE",
                     },
                  ],
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-10-17T19:28:30.376Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "Chrome",
               vendor: "Google",
               versions: [
                  {
                     lessThan: "111.0.5563.64",
                     status: "affected",
                     version: "111.0.5563.64",
                     versionType: "custom",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Type confusion in V8 in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Type Confusion",
                     lang: "en",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2023-03-07T21:42:15.917Z",
            orgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
            shortName: "Chrome",
         },
         references: [
            {
               url: "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
            },
            {
               url: "https://crbug.com/1412487",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
      assignerShortName: "Chrome",
      cveId: "CVE-2023-1214",
      datePublished: "2023-03-07T21:42:15.917Z",
      dateReserved: "2023-03-07T00:41:17.023Z",
      dateUpdated: "2024-10-17T19:28:30.376Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

CVE-2023-1217 (GCVE-0-2023-1217)

Vulnerability from cvelistv5

Published

2023-03-07 21:42

Modified

2024-10-15 15:20

Severity ?

Summary

Stack buffer overflow in Crash reporting in Google Chrome on Windows prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)

References

▼	URL	Tags
	https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html
	https://crbug.com/1412658

Impacted products

	Vendor	Product	Version
	Google	Chrome	Version: 111.0.5563.64 < 111.0.5563.64

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T05:40:58.717Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://crbug.com/1412658",
               },
            ],
            title: "CVE Program Container",
         },
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2023-1217",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-10-15T15:19:54.362970Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-10-15T15:20:03.706Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "Chrome",
               vendor: "Google",
               versions: [
                  {
                     lessThan: "111.0.5563.64",
                     status: "affected",
                     version: "111.0.5563.64",
                     versionType: "custom",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Stack buffer overflow in Crash reporting in Google Chrome on Windows prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Stack buffer overflow",
                     lang: "en",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2023-03-07T21:42:16.676Z",
            orgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
            shortName: "Chrome",
         },
         references: [
            {
               url: "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
            },
            {
               url: "https://crbug.com/1412658",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
      assignerShortName: "Chrome",
      cveId: "CVE-2023-1217",
      datePublished: "2023-03-07T21:42:16.676Z",
      dateReserved: "2023-03-07T00:41:17.614Z",
      dateUpdated: "2024-10-15T15:20:03.706Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

CVE-2023-1219 (GCVE-0-2023-1219)

Vulnerability from cvelistv5

Published

2023-03-07 21:42

Modified

2025-02-13 16:39

Severity ?

8.8 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Summary

Heap buffer overflow in Metrics in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

References

▼	URL	Tags
	https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html
	https://crbug.com/1415328
	http://packetstormsecurity.com/files/171795/Chrome-base-debug-ActivityUserData-ActivityUserData-Heap-Buffer-Overflow.html

Impacted products

	Vendor	Product	Version
	Google	Chrome	Version: 111.0.5563.64 < 111.0.5563.64

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T05:40:59.541Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://crbug.com/1415328",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "http://packetstormsecurity.com/files/171795/Chrome-base-debug-ActivityUserData-ActivityUserData-Heap-Buffer-Overflow.html",
               },
            ],
            title: "CVE Program Container",
         },
         {
            affected: [
               {
                  cpes: [
                     "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
                  ],
                  defaultStatus: "unknown",
                  product: "chrome",
                  vendor: "google",
                  versions: [
                     {
                        lessThan: "111.0.5563.64",
                        status: "affected",
                        version: "0",
                        versionType: "custom",
                     },
                  ],
               },
            ],
            metrics: [
               {
                  cvssV3_1: {
                     attackComplexity: "LOW",
                     attackVector: "NETWORK",
                     availabilityImpact: "HIGH",
                     baseScore: 8.8,
                     baseSeverity: "HIGH",
                     confidentialityImpact: "HIGH",
                     integrityImpact: "HIGH",
                     privilegesRequired: "NONE",
                     scope: "UNCHANGED",
                     userInteraction: "REQUIRED",
                     vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                     version: "3.1",
                  },
               },
               {
                  other: {
                     content: {
                        id: "CVE-2023-1219",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "total",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-10-15T15:56:43.031243Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            problemTypes: [
               {
                  descriptions: [
                     {
                        cweId: "CWE-787",
                        description: "CWE-787 Out-of-bounds Write",
                        lang: "en",
                        type: "CWE",
                     },
                  ],
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-10-15T15:57:47.896Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "Chrome",
               vendor: "Google",
               versions: [
                  {
                     lessThan: "111.0.5563.64",
                     status: "affected",
                     version: "111.0.5563.64",
                     versionType: "custom",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Heap buffer overflow in Metrics in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Heap buffer overflow",
                     lang: "en",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2023-04-10T19:06:20.558Z",
            orgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
            shortName: "Chrome",
         },
         references: [
            {
               url: "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
            },
            {
               url: "https://crbug.com/1415328",
            },
            {
               url: "http://packetstormsecurity.com/files/171795/Chrome-base-debug-ActivityUserData-ActivityUserData-Heap-Buffer-Overflow.html",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
      assignerShortName: "Chrome",
      cveId: "CVE-2023-1219",
      datePublished: "2023-03-07T21:42:16.971Z",
      dateReserved: "2023-03-07T00:41:17.808Z",
      dateUpdated: "2025-02-13T16:39:17.739Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

CVE-2023-1231 (GCVE-0-2023-1231)

Vulnerability from cvelistv5

Published

2023-03-07 21:42

Modified

2024-10-09 17:03

Severity ?

Summary

Inappropriate implementation in Autofill in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to potentially spoof the contents of the omnibox via a crafted HTML page. (Chromium security severity: Medium)

References

▼	URL	Tags
	https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html
	https://crbug.com/1274887

Impacted products

	Vendor	Product	Version
	Google	Chrome	Version: 111.0.5563.64 < 111.0.5563.64

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T05:40:59.251Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://crbug.com/1274887",
               },
            ],
            title: "CVE Program Container",
         },
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2023-1231",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-10-09T17:03:28.675217Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-10-09T17:03:47.940Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "Chrome",
               vendor: "Google",
               versions: [
                  {
                     lessThan: "111.0.5563.64",
                     status: "affected",
                     version: "111.0.5563.64",
                     versionType: "custom",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Inappropriate implementation in Autofill in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to potentially spoof the contents of the omnibox via a crafted HTML page. (Chromium security severity: Medium)",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Inappropriate implementation",
                     lang: "en",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2023-03-07T21:42:18.762Z",
            orgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
            shortName: "Chrome",
         },
         references: [
            {
               url: "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
            },
            {
               url: "https://crbug.com/1274887",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
      assignerShortName: "Chrome",
      cveId: "CVE-2023-1231",
      datePublished: "2023-03-07T21:42:18.762Z",
      dateReserved: "2023-03-07T00:41:19.709Z",
      dateUpdated: "2024-10-09T17:03:47.940Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

CVE-2023-1233 (GCVE-0-2023-1233)

Vulnerability from cvelistv5

Published

2023-03-07 21:42

Modified

2024-10-10 19:21

Severity ?

Summary

Insufficient policy enforcement in Resource Timing in Google Chrome prior to 111.0.5563.64 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from API via a crafted Chrome Extension. (Chromium security severity: Low)

References

▼	URL	Tags
	https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html
	https://crbug.com/1045681

Impacted products

	Vendor	Product	Version
	Google	Chrome	Version: 111.0.5563.64 < 111.0.5563.64

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T05:40:59.779Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://crbug.com/1045681",
               },
            ],
            title: "CVE Program Container",
         },
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2023-1233",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-10-10T19:20:50.743344Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-10-10T19:21:53.808Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "Chrome",
               vendor: "Google",
               versions: [
                  {
                     lessThan: "111.0.5563.64",
                     status: "affected",
                     version: "111.0.5563.64",
                     versionType: "custom",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Insufficient policy enforcement in Resource Timing in Google Chrome prior to 111.0.5563.64 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from API via a crafted Chrome Extension. (Chromium security severity: Low)",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Insufficient policy enforcement",
                     lang: "en",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2023-03-07T21:42:19.013Z",
            orgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
            shortName: "Chrome",
         },
         references: [
            {
               url: "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
            },
            {
               url: "https://crbug.com/1045681",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
      assignerShortName: "Chrome",
      cveId: "CVE-2023-1233",
      datePublished: "2023-03-07T21:42:19.013Z",
      dateReserved: "2023-03-07T00:41:19.907Z",
      dateUpdated: "2024-10-10T19:21:53.808Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

CVE-2023-1223 (GCVE-0-2023-1223)

Vulnerability from cvelistv5

Published

2023-03-07 21:42

Modified

2024-10-10 18:10

Severity ?

Summary

Insufficient policy enforcement in Autofill in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

References

▼	URL	Tags
	https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html
	https://crbug.com/1398579

Impacted products

	Vendor	Product	Version
	Google	Chrome	Version: 111.0.5563.64 < 111.0.5563.64

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T05:40:59.968Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://crbug.com/1398579",
               },
            ],
            title: "CVE Program Container",
         },
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2023-1223",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-10-10T18:10:20.000807Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-10-10T18:10:59.567Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "Chrome",
               vendor: "Google",
               versions: [
                  {
                     lessThan: "111.0.5563.64",
                     status: "affected",
                     version: "111.0.5563.64",
                     versionType: "custom",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Insufficient policy enforcement in Autofill in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Insufficient policy enforcement",
                     lang: "en",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2023-03-07T21:42:17.468Z",
            orgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
            shortName: "Chrome",
         },
         references: [
            {
               url: "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
            },
            {
               url: "https://crbug.com/1398579",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
      assignerShortName: "Chrome",
      cveId: "CVE-2023-1223",
      datePublished: "2023-03-07T21:42:17.468Z",
      dateReserved: "2023-03-07T00:41:18.338Z",
      dateUpdated: "2024-10-10T18:10:59.567Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

CVE-2023-1229 (GCVE-0-2023-1229)

Vulnerability from cvelistv5

Published

2023-03-07 21:42

Modified

2024-10-09 17:01

Severity ?

Summary

Inappropriate implementation in Permission prompts in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)

References

▼	URL	Tags
	https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html
	https://crbug.com/1160485

Impacted products

	Vendor	Product	Version
	Google	Chrome	Version: 111.0.5563.64 < 111.0.5563.64

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T05:40:59.653Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://crbug.com/1160485",
               },
            ],
            title: "CVE Program Container",
         },
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2023-1229",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-10-09T17:01:47.620225Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-10-09T17:01:57.112Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "Chrome",
               vendor: "Google",
               versions: [
                  {
                     lessThan: "111.0.5563.64",
                     status: "affected",
                     version: "111.0.5563.64",
                     versionType: "custom",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Inappropriate implementation in Permission prompts in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Inappropriate implementation",
                     lang: "en",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2023-03-07T21:42:18.478Z",
            orgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
            shortName: "Chrome",
         },
         references: [
            {
               url: "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
            },
            {
               url: "https://crbug.com/1160485",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
      assignerShortName: "Chrome",
      cveId: "CVE-2023-1229",
      datePublished: "2023-03-07T21:42:18.478Z",
      dateReserved: "2023-03-07T00:41:19.370Z",
      dateUpdated: "2024-10-09T17:01:57.112Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

CVE-2023-1216 (GCVE-0-2023-1216)

Vulnerability from cvelistv5

Published

2023-03-07 21:42

Modified

2024-10-15 14:56

Severity ?

8.8 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Summary

Use after free in DevTools in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had convienced the user to engage in direct UI interaction to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

References

▼	URL	Tags
	https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html
	https://crbug.com/1417649

Impacted products

	Vendor	Product	Version
	Google	Chrome	Version: 111.0.5563.64 < 111.0.5563.64

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T05:40:59.669Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://crbug.com/1417649",
               },
            ],
            title: "CVE Program Container",
         },
         {
            affected: [
               {
                  cpes: [
                     "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
                  ],
                  defaultStatus: "unknown",
                  product: "chrome",
                  vendor: "google",
                  versions: [
                     {
                        lessThan: "111.0.5563.64",
                        status: "affected",
                        version: "0",
                        versionType: "custom",
                     },
                  ],
               },
            ],
            metrics: [
               {
                  cvssV3_1: {
                     attackComplexity: "LOW",
                     attackVector: "NETWORK",
                     availabilityImpact: "HIGH",
                     baseScore: 8.8,
                     baseSeverity: "HIGH",
                     confidentialityImpact: "HIGH",
                     integrityImpact: "HIGH",
                     privilegesRequired: "NONE",
                     scope: "UNCHANGED",
                     userInteraction: "REQUIRED",
                     vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                     version: "3.1",
                  },
               },
               {
                  other: {
                     content: {
                        id: "CVE-2023-1216",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "total",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-10-15T14:54:58.446343Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            problemTypes: [
               {
                  descriptions: [
                     {
                        cweId: "CWE-416",
                        description: "CWE-416 Use After Free",
                        lang: "en",
                        type: "CWE",
                     },
                  ],
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-10-15T14:56:00.118Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "Chrome",
               vendor: "Google",
               versions: [
                  {
                     lessThan: "111.0.5563.64",
                     status: "affected",
                     version: "111.0.5563.64",
                     versionType: "custom",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Use after free in DevTools in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had convienced the user to engage in direct UI interaction to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Use after free",
                     lang: "en",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2023-03-07T21:42:16.442Z",
            orgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
            shortName: "Chrome",
         },
         references: [
            {
               url: "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
            },
            {
               url: "https://crbug.com/1417649",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
      assignerShortName: "Chrome",
      cveId: "CVE-2023-1216",
      datePublished: "2023-03-07T21:42:16.442Z",
      dateReserved: "2023-03-07T00:41:17.514Z",
      dateUpdated: "2024-10-15T14:56:00.118Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

CVE-2023-1218 (GCVE-0-2023-1218)

Vulnerability from cvelistv5

Published

2023-03-07 21:42

Modified

2024-10-15 15:55

Severity ?

8.8 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Summary

Use after free in WebRTC in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

References

▼	URL	Tags
	https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html
	https://crbug.com/1413628

Impacted products

	Vendor	Product	Version
	Google	Chrome	Version: 111.0.5563.64 < 111.0.5563.64

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T05:40:59.649Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://crbug.com/1413628",
               },
            ],
            title: "CVE Program Container",
         },
         {
            affected: [
               {
                  cpes: [
                     "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
                  ],
                  defaultStatus: "unknown",
                  product: "chrome",
                  vendor: "google",
                  versions: [
                     {
                        lessThan: "111.0.5563.64",
                        status: "affected",
                        version: "0",
                        versionType: "custom",
                     },
                  ],
               },
            ],
            metrics: [
               {
                  cvssV3_1: {
                     attackComplexity: "LOW",
                     attackVector: "NETWORK",
                     availabilityImpact: "HIGH",
                     baseScore: 8.8,
                     baseSeverity: "HIGH",
                     confidentialityImpact: "HIGH",
                     integrityImpact: "HIGH",
                     privilegesRequired: "NONE",
                     scope: "UNCHANGED",
                     userInteraction: "REQUIRED",
                     vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                     version: "3.1",
                  },
               },
               {
                  other: {
                     content: {
                        id: "CVE-2023-1218",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "total",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-10-15T15:52:00.254584Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            problemTypes: [
               {
                  descriptions: [
                     {
                        cweId: "CWE-416",
                        description: "CWE-416 Use After Free",
                        lang: "en",
                        type: "CWE",
                     },
                  ],
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-10-15T15:55:48.500Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "Chrome",
               vendor: "Google",
               versions: [
                  {
                     lessThan: "111.0.5563.64",
                     status: "affected",
                     version: "111.0.5563.64",
                     versionType: "custom",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Use after free in WebRTC in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Use after free",
                     lang: "en",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2023-03-07T21:42:16.848Z",
            orgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
            shortName: "Chrome",
         },
         references: [
            {
               url: "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
            },
            {
               url: "https://crbug.com/1413628",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
      assignerShortName: "Chrome",
      cveId: "CVE-2023-1218",
      datePublished: "2023-03-07T21:42:16.848Z",
      dateReserved: "2023-03-07T00:41:17.711Z",
      dateUpdated: "2024-10-15T15:55:48.500Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

CVE-2023-1226 (GCVE-0-2023-1226)

Vulnerability from cvelistv5

Published

2023-03-07 21:42

Modified

2024-10-10 18:28

Severity ?

Summary

Insufficient policy enforcement in Web Payments API in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Medium)

References

▼	URL	Tags
	https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html
	https://crbug.com/1013080

Impacted products

	Vendor	Product	Version
	Google	Chrome	Version: 111.0.5563.64 < 111.0.5563.64

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T05:40:59.738Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://crbug.com/1013080",
               },
            ],
            title: "CVE Program Container",
         },
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2023-1226",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-10-10T18:28:22.624122Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-10-10T18:28:51.855Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "Chrome",
               vendor: "Google",
               versions: [
                  {
                     lessThan: "111.0.5563.64",
                     status: "affected",
                     version: "111.0.5563.64",
                     versionType: "custom",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Insufficient policy enforcement in Web Payments API in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Medium)",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Insufficient policy enforcement",
                     lang: "en",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2023-03-07T21:42:17.961Z",
            orgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
            shortName: "Chrome",
         },
         references: [
            {
               url: "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
            },
            {
               url: "https://crbug.com/1013080",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
      assignerShortName: "Chrome",
      cveId: "CVE-2023-1226",
      datePublished: "2023-03-07T21:42:17.961Z",
      dateReserved: "2023-03-07T00:41:18.835Z",
      dateUpdated: "2024-10-10T18:28:51.855Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

CVE-2023-1228 (GCVE-0-2023-1228)

Vulnerability from cvelistv5

Published

2023-03-07 21:42

Modified

2024-10-10 18:43

Severity ?

8.8 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Summary

Insufficient policy enforcement in Intents in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)

References

▼	URL	Tags
	https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html
	https://crbug.com/1365100

Impacted products

	Vendor	Product	Version
	Google	Chrome	Version: 111.0.5563.64 < 111.0.5563.64

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T05:40:59.807Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://crbug.com/1365100",
               },
            ],
            title: "CVE Program Container",
         },
         {
            affected: [
               {
                  cpes: [
                     "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
                  ],
                  defaultStatus: "unknown",
                  product: "chrome",
                  vendor: "google",
                  versions: [
                     {
                        lessThan: "111.0.5563.64",
                        status: "affected",
                        version: "0",
                        versionType: "custom",
                     },
                  ],
               },
            ],
            metrics: [
               {
                  cvssV3_1: {
                     attackComplexity: "LOW",
                     attackVector: "NETWORK",
                     availabilityImpact: "HIGH",
                     baseScore: 8.8,
                     baseSeverity: "HIGH",
                     confidentialityImpact: "HIGH",
                     integrityImpact: "HIGH",
                     privilegesRequired: "NONE",
                     scope: "UNCHANGED",
                     userInteraction: "REQUIRED",
                     vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                     version: "3.1",
                  },
               },
               {
                  other: {
                     content: {
                        id: "CVE-2023-1228",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-10-10T18:37:09.787865Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-10-10T18:43:28.118Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "Chrome",
               vendor: "Google",
               versions: [
                  {
                     lessThan: "111.0.5563.64",
                     status: "affected",
                     version: "111.0.5563.64",
                     versionType: "custom",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Insufficient policy enforcement in Intents in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Insufficient policy enforcement",
                     lang: "en",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2023-03-07T21:42:18.300Z",
            orgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
            shortName: "Chrome",
         },
         references: [
            {
               url: "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
            },
            {
               url: "https://crbug.com/1365100",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
      assignerShortName: "Chrome",
      cveId: "CVE-2023-1228",
      datePublished: "2023-03-07T21:42:18.300Z",
      dateReserved: "2023-03-07T00:41:19.202Z",
      dateUpdated: "2024-10-10T18:43:28.118Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

CVE-2023-1225 (GCVE-0-2023-1225)

Vulnerability from cvelistv5

Published

2023-03-07 21:42

Modified

2024-10-10 18:19

Severity ?

Summary

Insufficient policy enforcement in Navigation in Google Chrome on iOS prior to 111.0.5563.64 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)

References

▼	URL	Tags
	https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html
	https://crbug.com/1408799

Impacted products

	Vendor	Product	Version
	Google	Chrome	Version: 111.0.5563.64 < 111.0.5563.64

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T05:40:59.601Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://crbug.com/1408799",
               },
            ],
            title: "CVE Program Container",
         },
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2023-1225",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-10-10T18:18:30.724236Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-10-10T18:19:01.567Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "Chrome",
               vendor: "Google",
               versions: [
                  {
                     lessThan: "111.0.5563.64",
                     status: "affected",
                     version: "111.0.5563.64",
                     versionType: "custom",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Insufficient policy enforcement in Navigation in Google Chrome on iOS prior to 111.0.5563.64 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Insufficient policy enforcement",
                     lang: "en",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2023-03-07T21:42:17.836Z",
            orgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
            shortName: "Chrome",
         },
         references: [
            {
               url: "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
            },
            {
               url: "https://crbug.com/1408799",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
      assignerShortName: "Chrome",
      cveId: "CVE-2023-1225",
      datePublished: "2023-03-07T21:42:17.836Z",
      dateReserved: "2023-03-07T00:41:18.720Z",
      dateUpdated: "2024-10-10T18:19:01.567Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

CVE-2023-1224 (GCVE-0-2023-1224)

Vulnerability from cvelistv5

Published

2023-03-07 21:42

Modified

2024-10-10 18:13

Severity ?

Summary

Insufficient policy enforcement in Web Payments API in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)

References

▼	URL	Tags
	https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html
	https://crbug.com/1403539

Impacted products

	Vendor	Product	Version
	Google	Chrome	Version: 111.0.5563.64 < 111.0.5563.64

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T05:40:59.645Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://crbug.com/1403539",
               },
            ],
            title: "CVE Program Container",
         },
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2023-1224",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-10-10T18:12:47.448346Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-10-10T18:13:11.264Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "Chrome",
               vendor: "Google",
               versions: [
                  {
                     lessThan: "111.0.5563.64",
                     status: "affected",
                     version: "111.0.5563.64",
                     versionType: "custom",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Insufficient policy enforcement in Web Payments API in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Insufficient policy enforcement",
                     lang: "en",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2023-03-07T21:42:17.668Z",
            orgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
            shortName: "Chrome",
         },
         references: [
            {
               url: "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
            },
            {
               url: "https://crbug.com/1403539",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
      assignerShortName: "Chrome",
      cveId: "CVE-2023-1224",
      datePublished: "2023-03-07T21:42:17.668Z",
      dateReserved: "2023-03-07T00:41:18.616Z",
      dateUpdated: "2024-10-10T18:13:11.264Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

CVE-2023-1236 (GCVE-0-2023-1236)

Vulnerability from cvelistv5

Published

2023-03-07 21:42

Modified

2024-10-09 19:48

Severity ?

Summary

Inappropriate implementation in Internals in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to spoof the origin of an iframe via a crafted HTML page. (Chromium security severity: Low)

References

▼	URL	Tags
	https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html
	https://crbug.com/1374518

Impacted products

	Vendor	Product	Version
	Google	Chrome	Version: 111.0.5563.64 < 111.0.5563.64

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T05:40:59.795Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://crbug.com/1374518",
               },
            ],
            title: "CVE Program Container",
         },
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2023-1236",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-10-09T19:48:01.534933Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-10-09T19:48:18.134Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "Chrome",
               vendor: "Google",
               versions: [
                  {
                     lessThan: "111.0.5563.64",
                     status: "affected",
                     version: "111.0.5563.64",
                     versionType: "custom",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Inappropriate implementation in Internals in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to spoof the origin of an iframe via a crafted HTML page. (Chromium security severity: Low)",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Inappropriate implementation",
                     lang: "en",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2023-03-07T21:42:19.373Z",
            orgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
            shortName: "Chrome",
         },
         references: [
            {
               url: "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
            },
            {
               url: "https://crbug.com/1374518",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
      assignerShortName: "Chrome",
      cveId: "CVE-2023-1236",
      datePublished: "2023-03-07T21:42:19.373Z",
      dateReserved: "2023-03-07T00:41:20.262Z",
      dateUpdated: "2024-10-09T19:48:18.134Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

Vulnerability from csaf_opensuse

CVE-2023-1213 (GCVE-0-2023-1213)

Vulnerability from cvelistv5

CVE-2023-1227 (GCVE-0-2023-1227)

Vulnerability from cvelistv5

CVE-2023-1234 (GCVE-0-2023-1234)

Vulnerability from cvelistv5

CVE-2023-1222 (GCVE-0-2023-1222)

Vulnerability from cvelistv5

CVE-2023-1232 (GCVE-0-2023-1232)

Vulnerability from cvelistv5

CVE-2023-1235 (GCVE-0-2023-1235)

Vulnerability from cvelistv5

CVE-2023-1230 (GCVE-0-2023-1230)

Vulnerability from cvelistv5

CVE-2023-1215 (GCVE-0-2023-1215)

Vulnerability from cvelistv5

CVE-2023-1221 (GCVE-0-2023-1221)

Vulnerability from cvelistv5

CVE-2023-1220 (GCVE-0-2023-1220)

Vulnerability from cvelistv5

CVE-2023-1214 (GCVE-0-2023-1214)

Vulnerability from cvelistv5

CVE-2023-1217 (GCVE-0-2023-1217)

Vulnerability from cvelistv5

CVE-2023-1219 (GCVE-0-2023-1219)

Vulnerability from cvelistv5

CVE-2023-1231 (GCVE-0-2023-1231)

Vulnerability from cvelistv5

CVE-2023-1233 (GCVE-0-2023-1233)

Vulnerability from cvelistv5

CVE-2023-1223 (GCVE-0-2023-1223)

Vulnerability from cvelistv5

CVE-2023-1229 (GCVE-0-2023-1229)

Vulnerability from cvelistv5

CVE-2023-1216 (GCVE-0-2023-1216)

Vulnerability from cvelistv5

CVE-2023-1218 (GCVE-0-2023-1218)

Vulnerability from cvelistv5

CVE-2023-1226 (GCVE-0-2023-1226)

Vulnerability from cvelistv5

CVE-2023-1228 (GCVE-0-2023-1228)

Vulnerability from cvelistv5

CVE-2023-1225 (GCVE-0-2023-1225)

Vulnerability from cvelistv5

CVE-2023-1224 (GCVE-0-2023-1224)

Vulnerability from cvelistv5

CVE-2023-1236 (GCVE-0-2023-1236)

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature