![]() CVE-2023-5172, which involves memory corruption issues, was also resolved. ![]() The third security flaw, CVE-2023-5170, is a memory leak that could allow escape from the test environment.Īnother vulnerability, CVE-2023-5171, was found in the Ion compiler and could lead to a potentially exploitable crash.The first two vulnerabilities, CVE-2023-5168 and CVE-2023-5169, involve out-of-bounds write issues in browser components. ![]() The Firefox 118 update includes patches for five high-criticality vulnerabilities according to the vendor, which are primarily memory issues with exploitable potential. Mozilla issued security updates for Firefox and Thunderbird, addressing nine vulnerabilities, some of high severity. More info Mozilla patches high-severity vulnerabilities in Firefox and Thunderbird The company has also stated that it will not disclose further details about the bugs until the patches have been deployed to the majority of users for security reasons. The other two vulnerabilities are use-after-free and affect Passwords ( CVE-2023-5186) and Extensions ( CVE-2023-5187).Īccording to Google, the 1.132 update will be available for Windows, Mac and Linux in the coming days. The impact of this vulnerability ranges from application crashes to arbitrary code execution by an attacker. Among the patched flaws is a 0-day being exploited in attacks since early 2023, named CVE-2023-5217, which is caused by a buffer overflow weakness in the VP8 encoding of the libvpx library. Google has released a new security update for Chrome patching a total of ten security flaws, including three high severity vulnerabilities. Google patches an actively exploited Chrome 0-day
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |