Exploit / PoCcriticalExploited in the wild

Google fixes Chrome zero day exploited in the wild (CVE-2023-6345)

Help Net Securityby @helpnetsecurityDec 7, 2023 · 10:32 UTC (Dec 7, 2023)1 min read3 · 1 read

Read at helpnetsecurity.com

Analyze CVE-2023-6345 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2023-6345 CVE-2023-6348 CVE-2023-6347 CVE-2023-6346 CVE-2023-6350 CVE-2023-6351 CVE-2023-4863 CVE-2023-5217

Tags: cve-2023-6345 cve-2023-6348 cve-2023-6347 cve-2023-6346 cve-2023-6350 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-4863	Out-of-Bounds Write in Google Chromium WebP Image Codec Actively Exploited	8.8	100%	KEVPoC ×4	Sep 12, 2023 KEV Sep 13, 2023
CVE-2023-5217	Heap Buffer Overflow in Google Chromium libvpx (CVE-2023-5217) Added to CISA KEV	8.8	49%	KEVPoC	Sep 28, 2023 KEV Oct 2, 2023
CVE-2023-6345	Integer Overflow in Google Chrome's Skia Enables Sandbox Escape (Actively Exploited)	9.6	16%	KEV	Nov 29, 2023 KEV Nov 30, 2023
CVE-2023-6350 +4 related CVEs CVE-2023-6347 CVE-2023-6348 CVE-2023-6346 CVE-2023-6351	Use after free in libavif in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption via a crafted avif file	8.8	1%		Nov 29, 2023

From the original article

1 min read at helpnetsecurity.com

Google has released an urgent security update to fix a number of vulnerabilities in Chrome browser, including a zero-day vulnerability (CVE-2023-6345) that is being actively exploited in the wild.

Help Net Security

By @helpnetsecurity · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.