CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
Confidence
High
EPSS
Percentile
55.4%
chromium is vulnerable to Use After Free. The vulnerability exists in the Reading Mode component of the library which allows an attacker to convince user to engage in specific UI gestures to potentially exploit heap corruption via specific UI gestures
chromereleases.googleblog.com/2023/10/stable-channel-update-for-desktop_31.html
crbug.com/1492396
lists.fedoraproject.org/archives/list/[email protected]/message/2MHLJRFWZNY6BFOW25Q4FEESVWZKS4C2/
lists.fedoraproject.org/archives/list/[email protected]/message/EBA4KD5ZSV6XWWFLVR5UBYKKNOYMH33H/
lists.fedoraproject.org/archives/list/[email protected]/message/PHWLT3M2AQDFD7RNAM3NJMYUC5KHMO5V/
security-tracker.debian.org/tracker/CVE-2023-5855
security.gentoo.org/glsa/202311-11
security.gentoo.org/glsa/202312-07
security.gentoo.org/glsa/202401-34
www.debian.org/security/2023/dsa-5546
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
Confidence
High
EPSS
Percentile
55.4%