CVE-2023-6345 (CVSS score: 9.6) - Integer overflow in SkiaĪ total of 26,447 vulnerabilities have been disclosed so far in 2023, surpassing the previous year by over 1,500 CVEs, according to data compiled by Qualys, with 115 flaws exploited by threat actors and ransomware groups.With this software, you can easily capture any activity on your computer screen and add a personal touch with the customizable narration feature.CVE-2023-5217 (CVSS score: 8.8) - Heap buffer overflow in vp8 encoding in libvpx.CVE-2023-4863 (CVSS score: 8.8) - Heap buffer overflow in WebP.CVE-2023-2136 (CVSS score: 9.6) - Integer overflow in Skia.The development marks the resolution of the eighth actively exploited zero-day in Chrome since the start of the year. Given that WebRTC is an open-source project and that it's also supported by Mozilla Firefox and Apple Safari, it's currently not clear if the flaw has any impact beyond Chrome and Chromium-based browsers. No other details about the security defect have been released to prevent further abuse, with Google acknowledging that 'an exploit for CVE-2023-7024 exists in the wild.' The vulnerability, assigned the CVE identifier CVE-2023-7024, has been described as a heap-based buffer overflow bug in the WebRTC framework that could be exploited to result in program crashes or arbitrary code execution.Ĭlément Lecigne and Vlad Stolyarov of Google's Threat Analysis Group (TAG) have been credited with discovering and reporting the flaw on December 19, 2023.

Google has rolled out security updates for the Chrome web browser to address a high-severity zero-day flaw that it said has been exploited in the wild.

Chromium 119.0.6040.0 download the new