CVE-2023-6112: Use after free in Navigation

Reference Links

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-6112 (Advisory)
• https://security-tracker.debian.org/tracker/CVE-2023-6112
• https://chromereleases.googleblog.com/2023/11/stable-channel-update-for-desktop_14.html (Advisory)
• https://crbug.com/1499298
• https://www.debian.org/security/2023/dsa-5556
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XWHRLW3GDNFBFSBHDD4QOPUPX7ORTUEC/
• https://security.gentoo.org/glsa/202311-11
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JHUI5HW7QXT3U74MJMTLUMF5REDO5HD5/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MN3JQGEC4EFQP3WTI33YBD3CLC3I7P4X/

Parent vulnerabilities

(Appears in the following advisories)

• 4741562140317026356

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2023-5997

Frequently Asked Questions

• What is CVE-2023-6112?

  CVE-2023-6112 is a vulnerability in Google Chrome that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page.

• What is the severity of CVE-2023-6112?

  CVE-2023-6112 has a severity rating of High (8.8).

• Which software versions are affected by CVE-2023-6112?

  Microsoft Edge (Chromium-based) versions prior to 119.0.2151.72 and Google Chrome versions prior to 119.0.6045.159 are affected by CVE-2023-6112.

• How can I fix CVE-2023-6112 in Microsoft Edge?

  To fix CVE-2023-6112 in Microsoft Edge, update to version 119.0.2151.72 or later.

• How can I fix CVE-2023-6112 in Google Chrome?

  To fix CVE-2023-6112 in Google Chrome, update to version 119.0.6045.159 or later.