Lucene search

K
chromeHttps://chromereleases.googleblog.comGCSA-7463221090388839304
HistoryJan 16, 2024 - 12:00 a.m.

Stable Channel Update for ChromeOS / ChromeOS Flex

2024-01-1600:00:00
https://chromereleases.googleblog.com
chromereleases.googleblog.com
9
chromeos
stable channel
update
version 120.0.6099.235
security fix
gpu memory leak
cve-2023-4969
update recommendation

6.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

28.7%

Hello All,

The Stable channel is being updated to 120.0.6099.235 (Platform version: 15662.76.0) for ChromeOS devices and will be rolled out over the next few days.

If you find new issues, please let us know one of the following ways:

Interested in switching channels? Find out how.

See the latest release notes.

Security Fixes:

Security Fixes Included:

[NA] High Fixes CVE-2023-4969 (LeftoverLocals) GPU Memory Leak on impacted platforms. For more, see: <https://kb.cert.org/vuls/id/446598&gt;

Please Note:_ Users who are pinned to a specific release of ChromeOS will not receive these security fixes or any other security fixes. We recommend updating to the latest version of Stable to ensure you are protected against exploitation of known vulnerabilities. _

To see fixes included in the Long Term Stable channel, see the Long Term Stable release notes.

- Google ChromeOS

Affected configurations

Vulners
Node
googlechrome_osRange<120.0.6099.235
CPENameOperatorVersion
chrome oslt120.0.6099.235

6.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

28.7%