CVE-2023-5856: Use after free in Side Panel
Chromium: CVE-2023-5856 Use after free in Side Panel
Other sources
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
— Microsoft
Use after free in Side Panel in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
Credit
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Google Chrome (Trace Event)to a version that resolves this vulnerability.Fixed in 119.0.6045.105 - Upgrade
Upgrade
debian/chromiumto a version that resolves this vulnerability.Fixed in 150.0.7871.100-1~deb12u1Fixed in 156.0.8078.79-1~deb12u1Fixed in 150.0.7871.181-1~deb13u1Fixed in 156.0.8078.79-1~deb13u1Fixed in 156.0.8078.79-1 - Upgrade
Upgrade
Google Chrometo a version that resolves this vulnerability.Fixed in 119.0.6045.105
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2023-5856.
What is the title of the vulnerability?
The title of the vulnerability is 'Chromium: CVE-2023-5856 Use after free in Side Panel'.
What is the severity of the vulnerability?
The severity of the vulnerability is Medium.
Which software is affected by this vulnerability?
The Microsoft Edge (Chromium-based) versions prior to 119.0.6045.105 are affected by this vulnerability.
How can I fix this vulnerability?
To fix this vulnerability, update your Microsoft Edge (Chromium-based) to version 119.0.6045.105 or later.