CVE-2023-6112

概要

参考情報

• packetstormsecurity.com/files/176721/Chrome-content-NavigationURLLoaderImpl-FallbackToNonInterceptedRequest-Heap-Use-After-Free.html · Third Party Advisory
• chromereleases.googleblog.com/2023/11/stable-channel-update-for-desktop_14.html · Release Notes
• crbug.com/1499298 · Permissions Required
• lists.fedoraproject.org/archives/list/[email protected]/message/JHUI5HW7QXT3U74MJMTLUMF5REDO5HD5 · Mailing List
• lists.fedoraproject.org/archives/list/[email protected]/message/MN3JQGEC4EFQP3WTI33YBD3CLC3I7P4X · Mailing List
• lists.fedoraproject.org/archives/list/[email protected]/message/XWHRLW3GDNFBFSBHDD4QOPUPX7ORTUEC · Mailing List
• security.gentoo.org/glsa/202311-11 · Third Party Advisory
• security.gentoo.org/glsa/202312-07 · Third Party Advisory
• security.gentoo.org/glsa/202401-34
• debian.org/security/2023/dsa-5556 · Third Party Advisory

chrome のその他の脆弱性

• CVE-2026-118359高 8.8Memory corruption in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the s…
• CVE-2026-118358高 8.8Memory corruption in WebAudio in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside…
• CVE-2026-118357高 8.8Use after free in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside …
• CVE-2026-118356高 8.8Use after free in WTF in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a c…
• CVE-2026-118354高 8.8Improper input validation in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code in…