Google Chromium V8 Type Confusion Vulnerability

概要

参考情報

• chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop.html · Vendor Advisory
• crbug.com/1473247 · Permissions Required
• lists.fedoraproject.org/archives/list/[email protected]/message/27NR3KG553CG6LGPMP6SHWEVHTYPL6RC · Mailing List
• lists.fedoraproject.org/archives/list/[email protected]/message/6T655QF7CQ3DYAMPFV7IECQYGDEUIVVT · Mailing List
• lists.fedoraproject.org/archives/list/[email protected]/message/KUQ7CTX3W372X3UY56VVNAHCH6H2F4X3 · Mailing List
• msrc.microsoft.com/update-guide/vulnerability/CVE-2023-4762 · Patch
• security.gentoo.org/glsa/202311-11 · Third Party Advisory
• security.gentoo.org/glsa/202312-07 · Third Party Advisory
• security.gentoo.org/glsa/202401-34 · Third Party Advisory

chrome のその他の脆弱性

• CVE-2026-118359高 8.8Memory corruption in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the s…
• CVE-2026-118358高 8.8Memory corruption in WebAudio in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside…
• CVE-2026-118357高 8.8Use after free in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside …
• CVE-2026-118356高 8.8Use after free in WTF in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a c…
• CVE-2026-118354高 8.8Improper input validation in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code in…