Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2024:2010 - https://access.redhat.com/security/cve/CVE-2023-4320 - https://bugzilla.redhat.com/show_bug.cgi?id=2231814
CVE ID: CVE-2023-4321 State: PUBLISHED Published: 2023-08-14T10:26:07.663Z Last Updated: 2024-10-03T19:55:50.785Z Severity: HIGH (CVSS 8.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L) Vendors: cockpit-hq Products: cockpit-hq/cockpit Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository cockpit-hq/cockpit prior to 2.4.3. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/fce38751-bfd6-484c-b6e1-935e0aa8ffdc - https://github.com/cockpit-hq/cockpit/commit/34ab31ee9362da51b9709e178469dbffd7717249
CVE ID: CVE-2023-4322 State: PUBLISHED Published: 2023-08-14T15:27:40.797Z Last Updated: 2025-07-03T14:17:19.554Z Severity: HIGH (CVSS 7.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L) Vendors: radareorg Products: radareorg/radare2 Problem Types: CWE-122 Description: Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.9.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/06e2484c-d6f1-4497-af67-26549be9fffd - https://github.com/radareorg/radare2/commit/ba919adb74ac368bf76b150a00347ded78b572dd - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/64KUV6OGEVQ7
ed78b572dd - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/64KUV6OGEVQ75QOV35PUVVDOJTKSJHYN/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SOZ6XCADVAPAIHMVSV3FUAN742BHXF55/
CVE ID: CVE-2023-4323 State: PUBLISHED Published: 2023-08-15T18:21:36.882Z Last Updated: 2025-11-04T16:10:16.803Z Vendors: Broadcom, Intel Products: LSI Storage Authority (LSA), RAID Web Console 3 (RWC3) Description: Broadcom RAID Controller web interface is vulnerable to improper session management of active sessions on Gateway setup Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.broadcom.com/support/resources/product-security-center
CVE ID: CVE-2023-4324 State: PUBLISHED Published: 2023-08-15T18:25:38.873Z Last Updated: 2025-11-04T16:10:17.767Z Vendors: Broadcom, Intel Products: LSI Storage Authority (LSA), RAID Web Console 3 (RWC3) Description: Broadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP Content-Security-Policy headers Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.broadcom.com/support/resources/product-security-center
CVE ID: CVE-2023-4325 State: PUBLISHED Published: 2023-08-15T18:25:38.706Z Last Updated: 2025-11-04T16:10:18.806Z Vendors: Broadcom, Intel Products: LSI Storage Authority (LSA), RAID Web Console 3 (RWC3) Description: Broadcom RAID Controller web interface is vulnerable due to usage of Libcurl with LSA has known vulnerabilities Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.broadcom.com/support/resources/product-security-center
CVE ID: CVE-2023-4326 State: PUBLISHED Published: 2023-08-15T18:25:38.586Z Last Updated: 2025-11-04T16:10:19.802Z Vendors: Broadcom, Intel Products: LSI Storage Authority (LSA), RAID Web Console 3 (RWC3) Problem Types: CWE-327 Description: Broadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that supports obsolete SHA1-based ciphersuites Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.broadcom.com/support/resources/product-security-center
CVE ID: CVE-2023-4327 State: PUBLISHED Published: 2023-08-15T18:25:38.370Z Last Updated: 2025-11-04T16:10:20.804Z Vendors: Broadcom Products: LSI Storage Authority (LSA) Problem Types: CWE-522 Description: Broadcom RAID Controller web interface is vulnerable to exposure of sensitive data and the keys used for encryption are accessible to any local user on Linux Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.broadcom.com/support/resources/product-security-center
CVE ID: CVE-2023-4328 State: PUBLISHED Published: 2023-08-15T18:25:38.246Z Last Updated: 2025-11-04T16:10:21.816Z Vendors: Broadcom Products: LSI Storage Authority (LSA) Problem Types: CWE-522 Description: Broadcom RAID Controller web interface is vulnerable to exposure of sensitive data and the keys used for encryption are accessible to any local user on Windows Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.broadcom.com/support/resources/product-security-center
CVE ID: CVE-2023-4329 State: PUBLISHED Published: 2023-08-15T18:25:38.060Z Last Updated: 2025-11-04T16:10:22.787Z Vendors: Broadcom, Intel Products: LSI Storage Authority (LSA), RAID Web Console 3 (RWC3) Description: Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard SESSIONID cookie with SameSite attribute Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.broadcom.com/support/resources/product-security-center
CVE ID: CVE-2023-4330 State: REJECTED Published: 2023-08-15T18:25:37.907Z Last Updated: 2023-09-15T23:49:25.056Z Description: No description available.
CVE ID: CVE-2023-4331 State: PUBLISHED Published: 2023-08-15T18:25:37.408Z Last Updated: 2025-11-04T16:10:23.816Z Vendors: Broadcom, Intel Products: LSI Storage Authority (LSA), RAID Web Console 3 (RWC3) Problem Types: CWE-327 Description: Broadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that support obsolete and vulnerable TLS protocols Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.broadcom.com/support/resources/product-security-center
CVE ID: CVE-2023-4332 State: PUBLISHED Published: 2023-08-15T18:25:37.323Z Last Updated: 2025-11-04T16:10:24.839Z Vendors: Broadcom, Intel Products: LSI Storage Authority (LSA), RAID Web Console 3 (RWC3) Problem Types: CWE-732 Description: Broadcom RAID Controller web interface is vulnerable due to Improper permissions on the log file Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.broadcom.com/support/resources/product-security-center
CVE ID: CVE-2023-4333 State: PUBLISHED Published: 2023-08-15T18:25:37.222Z Last Updated: 2025-11-04T16:10:26.180Z Vendors: Broadcom Products: LSI Storage Authority (LSA) Problem Types: CWE-326 Description: Broadcom RAID Controller web interface doesn’t enforce SSL cipher ordering by server Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.broadcom.com/support/resources/product-security-center
CVE ID: CVE-2023-4334 State: PUBLISHED Published: 2023-08-15T18:25:37.123Z Last Updated: 2025-11-04T16:10:27.191Z Vendors: Broadcom, Intel Products: LSI Storage Authority (LSA), RAID Web Console 3 (RWC3) Description: Broadcom RAID Controller Web server (nginx) is serving private files without any authentication Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.broadcom.com/support/resources/product-security-center
CVE ID: CVE-2023-4335 State: PUBLISHED Published: 2023-08-15T18:25:37.042Z Last Updated: 2024-10-08T19:37:21.254Z Vendors: Broadcom, Intel Products: LSI Storage Authority (LSA), RAID Web Console 3 (RWC3) Description: Broadcom RAID Controller Web server (nginx) is serving private server-side files without any authentication on Linux Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.broadcom.com/support/resources/product-security-center
CVE ID: CVE-2023-4336 State: PUBLISHED Published: 2023-08-15T18:25:36.778Z Last Updated: 2025-11-04T16:10:28.367Z Vendors: Broadcom, Intel Products: LSI Storage Authority (LSA), RAID Web Console 3 (RWC3) Description: Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard cookies with Secure attribute Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.broadcom.com/support/resources/product-security-center
CVE ID: CVE-2023-4337 State: PUBLISHED Published: 2023-08-15T18:25:36.690Z Last Updated: 2025-11-04T16:10:29.412Z Vendors: Broadcom, Intel Products: LSI Storage Authority (LSA), RAID Web Console 3 (RWC3) Description: Broadcom RAID Controller web interface is vulnerable to improper session handling of managed servers on Gateway installation Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.broadcom.com/support/resources/product-security-center
CVE ID: CVE-2023-4338 State: PUBLISHED Published: 2023-08-15T18:25:36.445Z Last Updated: 2025-11-04T16:10:30.391Z Vendors: Broadcom, Intel Products: LSI Storage Authority (LSA), RAID Web Console 3 (RWC3) Description: Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not provide X-Content-Type-Options Headers Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.broadcom.com/support/resources/product-security-center
CVE ID: CVE-2023-4339 State: PUBLISHED Published: 2023-08-15T18:25:35.162Z Last Updated: 2025-11-04T16:10:31.336Z Vendors: Broadcom, Intel Products: LSI Storage Authority (LSA), RAID Web Console 3 (RWC3) Description: Broadcom RAID Controller web interface is vulnerable to exposure of private keys used for CIM stored with insecure file permissions Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.broadcom.com/support/resources/product-security-center
CVE ID: CVE-2023-4340 State: PUBLISHED Published: 2023-08-15T18:25:35.073Z Last Updated: 2025-11-04T16:10:32.353Z Vendors: Broadcom, Intel Products: LSI Storage Authority (LSA), RAID Web Console 3 (RWC3) Description: Broadcom RAID Controller is vulnerable to Privilege escalation by taking advantage of the Session prints in the log file Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.broadcom.com/support/resources/product-security-center
CVE ID: CVE-2023-4341 State: PUBLISHED Published: 2023-08-15T18:25:34.542Z Last Updated: 2025-11-04T16:10:33.306Z Vendors: Broadcom, Intel Products: LSI Storage Authority (LSA), RAID Web Console 3 (RWC3) Description: Broadcom RAID Controller is vulnerable to Privilege escalation to root due to creation of insecure folders by Web GUI Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.broadcom.com/support/resources/product-security-center
CVE ID: CVE-2023-4342 State: PUBLISHED Published: 2023-08-15T18:25:34.363Z Last Updated: 2025-11-04T16:10:34.249Z Vendors: Broadcom, Intel Products: LSI Storage Authority (LSA), RAID Web Console 3 (RWC3) Description: Broadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP strict-transport-security policy Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.broadcom.com/support/resources/product-security-center
CVE ID: CVE-2023-4343 State: PUBLISHED Published: 2023-08-15T18:25:34.170Z Last Updated: 2025-11-04T16:10:35.278Z Vendors: Broadcom, Intel Products: LSI Storage Authority (LSA), RAID Web Console 3 (RWC3) Description: Broadcom RAID Controller web interface is vulnerable due to exposure of sensitive password information in the URL as a URL search parameter Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.broadcom.com/support/resources/product-security-center
CVE ID: CVE-2023-4344 State: PUBLISHED Published: 2023-08-15T18:25:34.072Z Last Updated: 2025-11-04T16:10:36.254Z Vendors: Broadcom, Intel Products: LSI Storage Authority (LSA), RAID Web Console 3 (RWC3) Problem Types: CWE-331 Description: Broadcom RAID Controller web interface is vulnerable to insufficient randomness due to improper use of ssl.rnd to setup CIM connection Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.broadcom.com/support/resources/product-security-center
CVE ID: CVE-2023-4345 State: PUBLISHED Published: 2023-08-15T17:46:38.983Z Last Updated: 2025-11-04T16:10:37.202Z Vendors: Broadcom, Intel Products: LSI Storage Authority (LSA), RAID Web Console 3 (RWC3) Description: Broadcom RAID Controller web interface is vulnerable client-side control bypass leads to unauthorized data access for low privileged user Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.broadcom.com/support/resources/product-security-center
CVE ID: CVE-2023-4346 State: PUBLISHED Published: 2023-08-29T19:38:55.399Z Last Updated: 2024-10-01T20:32:28.522Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: KNX Association Products: KNX Protocol Connection Authorization Option 1 Problem Types: CWE-645 Description: KNX devices that use KNX Connection Authorization and support Option 1 are, depending on the implementation, vulnerable to being locked and users being unable to reset them to gain access to the device. The BCU key feature on the devices can be used to create a password for the device, but this password can often not be reset without entering the current password. If the device is configured to
e device, but this password can often not be reset without entering the current password. If the device is configured to interface with a network, an attacker with access to that network could interface with the KNX installation, purge all devices without additional security options enabled, and set a BCU key, locking the device. Even if a device is not connected to a network, an attacker with physical access to the device could also exploit this vulnerability in the same way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-236-01
CVE ID: CVE-2023-4347 State: PUBLISHED Published: 2023-08-15T00:00:19.923Z Last Updated: 2024-10-03T13:41:01.070Z Severity: HIGH (CVSS 7.6 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L) Vendors: librenms Products: librenms/librenms Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Reflected in GitHub repository librenms/librenms prior to 23.8.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/1f78c6e1-2923-46c5-9376-4cc5a8f1152f - https://github.com/librenms/librenms/commit/91c57a1ee54631e071b6b0c952d99c8ee892e824
CVE ID: CVE-2023-4348 State: REJECTED Published: N/A Last Updated: 2024-11-15T12:12:51.854Z Description: No description available.
CVE ID: CVE-2023-4349 State: PUBLISHED Published: 2023-08-15T17:07:10.188Z Last Updated: 2025-02-13T17:13:15.296Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Device Trust Connectors in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2023/08/stable-channel-update-for-desktop_15.html - https://crbug.com/1458303 - https://www.debian.org/security/2023/dsa-5479 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fed
https://www.debian.org/security/2023/dsa-5479 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OCFEK63FUHFXZH5MSG6TNQOXMQWM4M5S/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2DMXHPRUGBUDNHZCZCIVMWAUIEXEGMGT/ - https://security.gentoo.org/glsa/202401-34
CVE ID: CVE-2023-4350 State: PUBLISHED Published: 2023-08-15T17:07:10.449Z Last Updated: 2025-02-13T17:13:16.466Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Fullscreen in Google Chrome on Android prior to 116.0.5845.96 allowed a remote attacker to potentially spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2023/08/stable-channel-update-for-desktop_15.html - https://crbug.com/1454817 - https://www.debian.org/security/2023/dsa-5479 - https://lists.fedoraprojec
desktop_15.html - https://crbug.com/1454817 - https://www.debian.org/security/2023/dsa-5479 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OCFEK63FUHFXZH5MSG6TNQOXMQWM4M5S/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2DMXHPRUGBUDNHZCZCIVMWAUIEXEGMGT/ - https://security.gentoo.org/glsa/202401-34
CVE ID: CVE-2023-4351 State: PUBLISHED Published: 2023-08-15T17:07:10.692Z Last Updated: 2025-02-13T17:13:17.045Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Network in Google Chrome prior to 116.0.5845.96 allowed a remote attacker who has elicited a browser shutdown to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2023/08/stable-channel-update-for-desktop_15.html - https://crbug.com/1465833 - https://www.debian.org/security/2023/dsa-5479 - https://lists.fedoraproject.org/archives/list/packag
crbug.com/1465833 - https://www.debian.org/security/2023/dsa-5479 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OCFEK63FUHFXZH5MSG6TNQOXMQWM4M5S/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2DMXHPRUGBUDNHZCZCIVMWAUIEXEGMGT/ - https://security.gentoo.org/glsa/202401-34
CVE ID: CVE-2023-4352 State: PUBLISHED Published: 2023-08-15T17:07:11.045Z Last Updated: 2025-05-05T15:53:28.841Z Vendors: Google Products: Chrome Problem Types: Type Confusion Description: Type confusion in V8 in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/08/stable-channel-update-for-desktop_15.html - https://crbug.com/1452076 - https://www.debian.org/security/2023/dsa-5479 - https://lists.fedoraproject.org/archives/list/package-announce@lists
6 - https://www.debian.org/security/2023/dsa-5479 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OCFEK63FUHFXZH5MSG6TNQOXMQWM4M5S/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2DMXHPRUGBUDNHZCZCIVMWAUIEXEGMGT/ - http://packetstormsecurity.com/files/174669/Chrome-Read-Only-Property-Overwrite.html - https://security.gentoo.org/glsa/202401-34
CVE ID: CVE-2023-4353 State: PUBLISHED Published: 2023-08-15T17:07:11.284Z Last Updated: 2025-02-13T17:13:18.159Z Vendors: Google Products: Chrome Problem Types: Heap buffer overflow Description: Heap buffer overflow in ANGLE in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/08/stable-channel-update-for-desktop_15.html - https://crbug.com/1458046 - https://www.debian.org/security/2023/dsa-5479 - https://lists.fedoraproject.org/archives/list/package
rbug.com/1458046 - https://www.debian.org/security/2023/dsa-5479 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OCFEK63FUHFXZH5MSG6TNQOXMQWM4M5S/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2DMXHPRUGBUDNHZCZCIVMWAUIEXEGMGT/ - https://security.gentoo.org/glsa/202401-34
CVE ID: CVE-2023-4354 State: PUBLISHED Published: 2023-08-15T17:07:11.467Z Last Updated: 2025-05-05T15:53:19.381Z Vendors: Google Products: Chrome Problem Types: Heap buffer overflow Description: Heap buffer overflow in Skia in Google Chrome prior to 116.0.5845.96 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/08/stable-channel-update-for-desktop_15.html - https://crbug.com/1464215 - https://www.debian.org/security/2023/dsa-5479 - https://lists
l-update-for-desktop_15.html - https://crbug.com/1464215 - https://www.debian.org/security/2023/dsa-5479 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OCFEK63FUHFXZH5MSG6TNQOXMQWM4M5S/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2DMXHPRUGBUDNHZCZCIVMWAUIEXEGMGT/ - http://packetstormsecurity.com/files/174949/Chrome-SKIA-Integer-Overflow.html - https://security.gentoo.org/glsa/202401-34
CVE ID: CVE-2023-4355 State: PUBLISHED Published: 2023-08-15T17:07:11.642Z Last Updated: 2025-05-05T15:53:08.571Z Vendors: Google Products: Chrome Problem Types: Out of bounds memory access Description: Out of bounds memory access in V8 in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/08/stable-channel-update-for-desktop_15.html - https://crbug.com/1468943 - https://www.debian.org/security/2023/dsa-5479 - https://lists.fedoraproject.org/archives/l
- https://crbug.com/1468943 - https://www.debian.org/security/2023/dsa-5479 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OCFEK63FUHFXZH5MSG6TNQOXMQWM4M5S/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2DMXHPRUGBUDNHZCZCIVMWAUIEXEGMGT/ - http://packetstormsecurity.com/files/174950/Chrome-Dangling-FixedArray-Pointers-Memory-Corruption.html - https://security.gentoo.org/glsa/202401-34
CVE ID: CVE-2023-4356 State: PUBLISHED Published: 2023-08-15T17:07:11.872Z Last Updated: 2025-02-13T17:13:19.785Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Audio in Google Chrome prior to 116.0.5845.96 allowed a remote attacker who has convinced a user to engage in specific UI interaction to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2023/08/stable-channel-update-for-desktop_15.html - https://crbug.com/1449929 - https://www.debian.org/security/2023/dsa-5479 - https://lists.fedoraprojec
desktop_15.html - https://crbug.com/1449929 - https://www.debian.org/security/2023/dsa-5479 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OCFEK63FUHFXZH5MSG6TNQOXMQWM4M5S/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2DMXHPRUGBUDNHZCZCIVMWAUIEXEGMGT/ - https://security.gentoo.org/glsa/202401-34