高危
Google Chrome安全漏洞(CVE-2023-4762)
2023-09-05 21:57:42 公开 ，2026-02-27 05:42:10 更新
- CISA KEV
- 关键漏洞
- 远程
- 无需认证
- 开源组件漏洞
- 公开PoC
- CWEs：
- CWE-843 （Type Confusion）
- SSVC：
- 可利用状态：已被积极利用攻击自动化：否技术影响评估：全部 2024-02-06 13:00:09
风险信息
- CVSS v3 向量
- AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS v3 风险值
- 8.8
- CVSS v3.1 向量
- AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS v3.1 风险值
- 8.8
详细信息
- 漏洞类型
- 其他
- 漏洞描述
- Google Chrome可能允许远程攻击者在系统上执行任意代码，这是由V8中的类型混淆引起的。通过说服受害者访问特制的网站，攻击者可以利用此漏洞在系统上执行任意代码或导致应用程序崩溃。
- 修复建议
- 1、Google Chrome Releases网站升级至Google Chrome的最新版本（116.0.5845.179或116.0.584.180或更高版本）。参考链接： 2、对于OpenHarmony 3.2.x版本，厂家已发布了补丁，请参阅下方链接。参考链接： https://chromereleases.googleblog.com/ https://gitee.com/openharmony/web_webview/pulls/988
参考链接
- https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop.html
NVD · Release Notes · Vendor Advisory
- https://crbug.com/1473247
NVD · Permissions Required
- https://www.debian.org/security/2023/dsa-5491
NVD · Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/27NR3KG553CG6LGPMP6SHWEVHTYPL6RC/
NVD · Mailing List · Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T655QF7CQ3DYAMPFV7IECQYGDEUIVVT/
NVD · Mailing List · Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KUQ7CTX3W372X3UY56VVNAHCH6H2F4X3/
NVD · Mailing List · Third Party Advisory
- https://security.gentoo.org/glsa/202311-11
NVD · Third Party Advisory
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-4762
NVD · Vendor Advisory · Patch
- https://security.gentoo.org/glsa/202312-07
NVD · Third Party Advisory
- https://security.gentoo.org/glsa/202401-34
NVD · Third Party Advisory
- https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2023/2023-11.md
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog
Snyk
- https://security.snyk.io/vuln/SNYK-JS-ELECTRON-5885094
- https://security.snyk.io/vuln/SNYK-UNMANAGED-CHROMIUM-5885089
- https://osv.dev/vulnerability/DSA-5491-1
OSV
- https://osv.dev/vulnerability/CVE-2023-4762
OSV
- https://security-tracker.debian.org/tracker/CVE-2023-4762
OSV
- https://osv.dev/vulnerability/DEBIAN-CVE-2023-4762
OSV