Gentoo Linux: CVE-2023-0139: Chromium, Google Chrome, Microsoft Edge: Multiple Vulnerabilities

Gentoo Linux: CVE-2023-0139: Chromium, Google Chrome, Microsoft Edge: Multiple Vulnerabilities

Severity

7

CVSS

(AV:N/AC:M/Au:N/C:N/I:C/A:N)

Published

01/10/2023

Created

05/05/2023

Added

05/04/2023

Modified

01/28/2025

Description

Insufficient validation of untrusted input in Downloads in Google Chrome on Windows prior to 109.0.5414.74 allowed a remote attacker to bypass download restrictions via a crafted HTML page. (Chromium security severity: Low)

Solution(s)

• gentoo-linux-upgrade-dev-qt-qtwebengine
• gentoo-linux-upgrade-www-client-chromium
• gentoo-linux-upgrade-www-client-chromium-bin
• gentoo-linux-upgrade-www-client-google-chrome
• gentoo-linux-upgrade-www-client-microsoft-edge

References

• https://attackerkb.com/topics/cve-2023-0139
• CVE - 2023-0139
• 202305-10
• 202311-11