CVE-2023-3217

概要

参考情報

• packetstormsecurity.com/files/173495/Chrome-device-OpenXrApiWrapper-InitSession-Heap-Use-After-Free.html
• chromereleases.googleblog.com/2023/06/stable-channel-update-for-desktop_13.html · Release Notes
• crbug.com/1450601 · Issue Tracking
• lists.fedoraproject.org/archives/list/[email protected]/message/JEH75UOM7FAXDUPC37YHP7ONL2HSDIJR
• lists.fedoraproject.org/archives/list/[email protected]/message/O362DC3ZCFRXVHOXMPIL73YOWABQEUYD · Mailing List
• security.gentoo.org/glsa/202311-11
• security.gentoo.org/glsa/202401-34
• debian.org/security/2023/dsa-5428 · Third Party Advisory

chrome のその他の脆弱性

• CVE-2026-118359高 8.8Memory corruption in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the s…
• CVE-2026-118358高 8.8Memory corruption in WebAudio in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside…
• CVE-2026-118357高 8.8Use after free in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside …
• CVE-2026-118356高 8.8Use after free in WTF in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a c…
• CVE-2026-118354高 8.8Improper input validation in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code in…