CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Google Chrome Skia Graphics Library Integer Overflow Vulnerability (CVE-2023-6345) Technical Advisory
[Affected Scope] Google Chrome and Chromium-based browsers prior to version 119.0.6045.199
[Impact] A remote attacker who has compromised the renderer process can exploit this vulnerability via a malicious file to escape the browser sandbox and execute arbitrary code
[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable channel (119.0.6045.199 or higher)
Google Chrome Skia Graphics Library Integer Overflow Vulnerability (CVE-2023-2136) Technical Analysis and Remediation Guide
[Affected Scope] Google Chrome and Chromium-based browsers prior to version 112.0.5615.137
[Impact] A remote attacker who has compromised the renderer process can potentially perform a sandbox escape and execute arbitrary code via a crafted HTML page
[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable version (112.0.5615.137 or higher)