First published: Sun Oct 01 2023(Updated: )
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2023">Google Chrome Releases</a> for more information.</p>
Credit: Minchin Park SSD chrome-cve-admin@google.com
Affected Software | Affected Version | How to fix |
---|---|---|
debian/chromium | <=90.0.4430.212-1~deb10u1<=116.0.5845.180-1~deb11u1 | 120.0.6099.129-1~deb11u1 119.0.6045.199-1~deb12u1 120.0.6099.129-1~deb12u1 120.0.6099.129-1 |
Microsoft Edge | <119.0.2151.44 | |
Microsoft Edge (Chromium-based) | ||
Google Chrome | <119.0.6045.105 | 119.0.6045.105 |
<119.0.6045.105 | ||
=11.0 | ||
=12.0 | ||
=37 | ||
=38 | ||
=39 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)
CVE-2023-5854 is a vulnerability labeled as 'Use after free in Profiles' in Google Chrome prior to version 119.0.6045.105.
CVE-2023-5854 has a security severity rating of Medium.
A remote attacker can potentially exploit CVE-2023-5854 by convincing a user to engage in specific UI gestures to trigger a use-after-free vulnerability that may lead to heap corruption.
Microsoft Edge (Chromium-based) versions up to 119.0.2151.44 are affected by CVE-2023-5854.
Update Microsoft Edge (Chromium-based) to version 119.0.2151.44 or higher to mitigate the vulnerability.