{"id":"CVE-2023-5476","aliases":["ALPINE-CVE-2023-5476","DEBIAN-CVE-2023-5476","DSA-5526-1","EUVD-2023-57790","GHSA-63pw-wc3v-c9g9","MGASA-2023-0289","openSUSE-SU-2023:0300-1","openSUSE-SU-2023:0337-1","openSUSE-SU-2023:0338-1","openSUSE-SU-2024:13317-1","openSUSE-SU-2024:13335-1"],"status":"published","title":"Use after free in Blink History in Google Chrome prior to 118.0.5993.70 allowed a remote attacker...","description":"Use after free in Blink History in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.00908,"percentile":0.60225,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-416"],"published":"2023-10-11T22:28:52Z","modified":"2026-11-03T06:32:48Z","fixes":[{"ecosystem":"Alpine:v3.19","package":"qt6-qtwebengine","fixed_in":["6.6.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"qt6-qtwebengine","fixed_in":["6.6.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"qt6-qtwebengine","fixed_in":["6.6.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"qt6-qtwebengine","fixed_in":["6.6.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"qt6-qtwebengine","fixed_in":["6.6.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"qt6-qtwebengine","fixed_in":["6.6.0-r1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"chromium","fixed_in":["118.0.5993.70-1~deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"chromium","fixed_in":["118.0.5993.70-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"chromium","fixed_in":["118.0.5993.70-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.19","package":"qt6-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"qt6-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"qt6-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"qt6-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"qt6-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"qt6-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6.0-r1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"chromium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"118.0.5993.70-1~deb12u1"}]}],"versions":["113.0.5672.126-1","114.0.5735.106-1","114.0.5735.106-1~deb11u1","114.0.5735.106-1~deb12u1","114.0.5735.133-1","114.0.5735.133-1~deb11u1","114.0.5735.133-1~deb12u1","114.0.5735.198-1","114.0.5735.198-1~deb11u1","114.0.5735.198-1~deb12u1","114.0.5735.90-1","114.0.5735.90-2","114.0.5735.90-2~deb11u1","114.0.5735.90-2~deb12u1","115.0.5790.102-1","115.0.5790.102-2","115.0.5790.170-1","115.0.5790.170-1~deb11u1","115.0.5790.170-1~deb12u1","115.0.5790.98-1","115.0.5790.98-1~deb11u1","115.0.5790.98-1~deb12u1","115.0.5790.98-2","116.0.5845.110-1","116.0.5845.110-1~deb11u1","116.0.5845.110-1~deb12u1","116.0.5845.110-2","116.0.5845.140-1","116.0.5845.140-1~deb11u1","116.0.5845.140-1~deb12u1","116.0.5845.180-1","116.0.5845.180-1~deb11u1","116.0.5845.180-1~deb12u1","116.0.5845.96-1","116.0.5845.96-1~deb11u1","116.0.5845.96-1~deb12u1","116.0.5845.96-2","117.0.5938.132-1","117.0.5938.132-1~deb11u1","117.0.5938.132-1~deb12u1","117.0.5938.132-2","117.0.5938.149-1","117.0.5938.149-1~deb11u1","117.0.5938.149-1~deb12u1","117.0.5938.62-1","117.0.5938.62-1~deb11u1","117.0.5938.62-1~deb12u1","117.0.5938.92-1","118.0.5993.70-1~deb11u1"]},{"source":"osv","ecosystem":"Debian:13","package":"chromium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"118.0.5993.70-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"chromium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"118.0.5993.70-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"chromium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"118.0.5993.70-1~deb12u1"}]}],"versions":["113.0.5672.126-1","114.0.5735.106-1","114.0.5735.106-1~deb11u1","114.0.5735.106-1~deb12u1","114.0.5735.133-1","114.0.5735.133-1~deb11u1","114.0.5735.133-1~deb12u1","114.0.5735.198-1","114.0.5735.198-1~deb11u1","114.0.5735.198-1~deb12u1","114.0.5735.90-1","114.0.5735.90-2","114.0.5735.90-2~deb11u1","114.0.5735.90-2~deb12u1","115.0.5790.102-1","115.0.5790.102-2","115.0.5790.170-1","115.0.5790.170-1~deb11u1","115.0.5790.170-1~deb12u1","115.0.5790.98-1","115.0.5790.98-1~deb11u1","115.0.5790.98-1~deb12u1","115.0.5790.98-2","116.0.5845.110-1","116.0.5845.110-1~deb11u1","116.0.5845.110-1~deb12u1","116.0.5845.110-2","116.0.5845.140-1","116.0.5845.140-1~deb11u1","116.0.5845.140-1~deb12u1","116.0.5845.180-1","116.0.5845.180-1~deb11u1","116.0.5845.180-1~deb12u1","116.0.5845.96-1","116.0.5845.96-1~deb11u1","116.0.5845.96-1~deb12u1","116.0.5845.96-2","117.0.5938.132-1","117.0.5938.132-1~deb11u1","117.0.5938.132-1~deb12u1","117.0.5938.132-2","117.0.5938.149-1","117.0.5938.149-1~deb11u1","117.0.5938.149-1~deb12u1","117.0.5938.62-1","117.0.5938.62-1~deb11u1","117.0.5938.62-1~deb12u1","117.0.5938.92-1","118.0.5993.70-1~deb11u1"],"bundled":14},{"source":"osv","ecosystem":"Debian:11","package":"chromium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"118.0.5993.70-1~deb11u1"}]}],"versions":["100.0.4896.127-1","100.0.4896.127-1~deb11u1","100.0.4896.60-1","100.0.4896.60-1~deb11u1","100.0.4896.75-1","100.0.4896.75-1~deb11u1","100.0.4896.88-1","100.0.4896.88-1~deb11u1","101.0.4951.41-1","101.0.4951.41-1~deb11u1","101.0.4951.41-2","101.0.4951.54-1","101.0.4951.64-1","101.0.4951.64-1~deb11u1","102.0.5005.115-1","102.0.5005.115-1~deb11u1","102.0.5005.61-1","102.0.5005.61-1~deb11u1","103.0.5060.114-1","103.0.5060.114-1~deb11u1","103.0.5060.134-1","103.0.5060.134-1~deb11u1","103.0.5060.53-1","103.0.5060.53-1~deb11u1","104.0.5112.101-1","104.0.5112.101-1~deb11u1","104.0.5112.79-1","104.0.5112.79-1~deb11u1","105.0.5195.102-1","105.0.5195.102-1~deb11u1","105.0.5195.125-1","105.0.5195.125-1~deb11u1","105.0.5195.52-1","105.0.5195.52-1~deb11u1","106.0.5249.103-1","106.0.5249.103-2","106.0.5249.119-1","106.0.5249.119-1~deb11u1","106.0.5249.61-1","106.0.5249.61-1~deb11u1","106.0.5249.91-1","106.0.5249.91-1~deb11u1","107.0.5304.110-1","107.0.5304.110-1~deb11u1","107.0.5304.110-2","107.0.5304.121-1","107.0.5304.121-1~deb11u1","107.0.5304.68-1","107.0.5304.68-1~deb11u1","107.0.5304.87-1","107.0.5304.87-1~deb11u1","108.0.5359.124-1","108.0.5359.124-1~deb11u1","108.0.5359.71-1","108.0.5359.71-2","108.0.5359.71-2~deb11u1","108.0.5359.94-1","108.0.5359.94-1~deb11u1","109.0.5414.119-1","109.0.5414.119-1~deb11u1","109.0.5414.74-1","109.0.5414.74-2","109.0.5414.74-2~deb11u1","110.0.5481.177-1","110.0.5481.177-1~deb11u1","110.0.5481.77-1","110.0.5481.77-1~deb11u1","110.0.5481.77-2","111.0.5563.110-1","111.0.5563.110-1~deb11u1","111.0.5563.64-1","111.0.5563.64-1~deb11u1","112.0.5615.121-1","112.0.5615.121-1~deb11u1","112.0.5615.138-1","112.0.5615.138-1~deb11u1","112.0.5615.49-1","112.0.5615.49-2","112.0.5615.49-2~deb11u1","112.0.5615.49-2~deb11u2","113.0.5672.126-1","113.0.5672.126-1~deb11u1","113.0.5672.63-1","113.0.5672.63-1~deb11u1","113.0.5672.63-2","114.0.5735.106-1","114.0.5735.106-1~deb11u1","114.0.5735.106-1~deb12u1","114.0.5735.133-1","114.0.5735.133-1~deb11u1","114.0.5735.133-1~deb12u1","114.0.5735.198-1","114.0.5735.198-1~deb11u1","114.0.5735.198-1~deb12u1","114.0.5735.90-1","114.0.5735.90-2","114.0.5735.90-2~deb11u1","114.0.5735.90-2~deb12u1","115.0.5790.102-1","115.0.5790.102-2","115.0.5790.170-1","115.0.5790.170-1~deb11u1","115.0.5790.170-1~deb12u1","115.0.5790.98-1","115.0.5790.98-1~deb11u1","115.0.5790.98-1~deb12u1","115.0.5790.98-2","116.0.5845.110-1","116.0.5845.110-1~deb11u1","116.0.5845.110-1~deb12u1","116.0.5845.110-2","116.0.5845.140-1","116.0.5845.140-1~deb11u1","116.0.5845.140-1~deb12u1","116.0.5845.180-1","116.0.5845.180-1~deb11u1","116.0.5845.180-1~deb12u1","116.0.5845.96-1","116.0.5845.96-1~deb11u1","116.0.5845.96-1~deb12u1","116.0.5845.96-2","117.0.5938.132-1","117.0.5938.132-1~deb11u1","117.0.5938.132-1~deb12u1","117.0.5938.132-2","117.0.5938.149-1","117.0.5938.149-1~deb11u1","117.0.5938.149-1~deb12u1","117.0.5938.62-1","117.0.5938.62-1~deb11u1","117.0.5938.62-1~deb12u1","117.0.5938.92-1","90.0.4430.212-1","93.0.4577.82-1","97.0.4692.71-0.1","97.0.4692.71-0.1~deb11u1","97.0.4692.99-1","97.0.4692.99-1~deb11u1","97.0.4692.99-1~deb11u2","98.0.4758.102-1","98.0.4758.102-1~deb11u1","98.0.4758.80-1","98.0.4758.80-1~deb11u1","99.0.4818.0-0.1","99.0.4844.51-1","99.0.4844.51-1~deb11u1","99.0.4844.51-2","99.0.4844.74-1","99.0.4844.74-1~deb11u1","99.0.4844.84-1","99.0.4844.84-1~deb11u1"],"bundled":14},{"source":"osv","ecosystem":"Mageia:9","package":"chromium-browser-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"118.0.5993.70-1.mga9.tainted"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP4","package":"chromium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"118.0.5993.70-bp155.2.46.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP5","package":"chromium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"118.0.5993.70-bp155.2.46.1"}]}],"bundled":14},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"chromium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"118.0.5993.70-bp155.2.46.1"}]}],"bundled":14},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"chromium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"118.0.5993.70-bp155.2.46.1"}]}],"bundled":14},{"source":"osv","ecosystem":"openSUSE:Leap 15.4 NonFree","package":"opera","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"104.0.4944.23-lp154.2.56.1"}]}],"bundled":14},{"source":"osv","ecosystem":"openSUSE:Leap 15.5 NonFree","package":"opera","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"104.0.4944.23-lp155.3.15.1"}]}],"bundled":14},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"chromium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"118.0.5993.70-1.1"}]}],"bundled":14},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"chromium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"118.0.5993.70-1.1"}]}],"bundled":14}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"google","product":"chrome"}],"references":[{"url":"https://chromereleases.googleblog.com/2023/10/stable-channel-update-for-desktop_10.html","tags":["x_transferred","Release Notes","Vendor Advisory","advisory"]},{"url":"https://crbug.com/1474253","tags":["x_transferred","Permissions Required","report"]},{"url":"https://www.debian.org/security/2023/dsa-5526","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"https://security.gentoo.org/glsa/202311-11","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"https://security.gentoo.org/glsa/202312-07","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"https://security.gentoo.org/glsa/202401-34","tags":["x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5476"},{"url":"https://github.com/advisories/GHSA-63pw-wc3v-c9g9"},{"url":"https://security.alpinelinux.org/vuln/CVE-2023-5476","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-5476","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2023-0289.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=32381","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/V6FXBWPURXQ5GA2B7HRPHLBGPNS46F3Y/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1216111","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5218","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5473","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5474","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5475","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5476","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5477","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5478","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5479","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5481","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5483","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5484","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5485","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5486","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5487","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TUKIBALWT55SDULG2YWIT6R3IQXHDSTQ/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CBGGDMAKEIS7OWQIGRX4OQWPP7OTHLDW/","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-5476","description":"Use after free in Blink History in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)","status":"published","published":"2023-10-11T22:28:52.85Z","modified":"2025-05-01T18:10:00.628Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:35:16.771348Z"}],"euvd":[{"id":"EUVD-2023-57790","description":"Use after free in Blink History in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)","status":"published","published":"2023-10-11T22:28:52Z","modified":"2025-05-01T18:10:00Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T20:51:56.915258Z"}],"ghsa":[{"id":"GHSA-63pw-wc3v-c9g9","title":"Use after free in Blink History in Google Chrome prior to 118.0.5993.70 allowed a remote attacker...","description":"Use after free in Blink History in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)","status":"published","published":"2023-10-12T00:30:28Z","modified":"2024-01-31T18:31:21Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:55:31.245778Z"}],"nvd":[{"id":"CVE-2023-5476","description":"Use after free in Blink History in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)","status":"published","published":"2023-10-11T23:15:10.65Z","modified":"2026-06-17T06:48:40.2Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:08:37.83429Z"}],"osv":[{"id":"ALPINE-CVE-2023-5476","description":"Use after free in Blink History in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)","status":"published","published":"2023-10-11T23:15:10.65Z","modified":"2026-11-03T06:32:48.927225554Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T07:16:46.202932Z"},{"id":"CVE-2023-5476","description":"Use after free in Blink History in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)","status":"published","published":"2023-10-11T23:15:10.65Z","modified":"2026-04-16T04:31:19.908271999Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:36.851042Z"},{"id":"DEBIAN-CVE-2023-5476","description":"Use after free in Blink History in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)","status":"published","published":"2023-10-11T23:15:10.65Z","modified":"2026-10-26T18:03:10.53114057Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:41.533064Z"},{"id":"DSA-5526-1","title":"chromium - security update","status":"published","published":"2023-10-12T00:00:00Z","modified":"2026-03-09T02:11:03.927614Z","updated_at":"2026-11-02T15:46:17.892347Z"},{"id":"MGASA-2023-0289","title":"Updated chromium-browser-stable packages fix bugs and vulnerabilities","description":"The chromium-browser-stable package has been updated to the\n118.0.5993.70 release, fixing 20 bugs and vulnerabilities.\n\nSome of the security fixes are:\n\nCritical CVE-2023-5218: Use after free in Site Isolation. Reported by\n@18 on 2023-09-27\n\nMedium CVE-2023-5487: Inappropriate implementation in Fullscreen.\nReported by Anonymous on 2020-03-17\n\nMedium CVE-2023-5484: Inappropriate implementation in Navigation.\nReported by Thomas Orlita on 2023-02-11\n\nMedium CVE-2023-5475: Inappropriate implementation in DevTools. Reported\nby Axel Chong on 2023-08-30\n\nMedium CVE-2023-5483: Inappropriate implementation in Intents. Reported\nby Axel Chong on 2023-03-17\n\nMedium CVE-2023-5481: Inappropriate implementation in Downloads.\nReported by Om Apip on 2023-06-28\n\nMedium CVE-2023-5476: Use after free in Blink History. Reported by\nYunqin Sun on 2023-08-20\n\nMedium CVE-2023-5474: Heap buffer overflow in PDF. Reported by [pwn2car]\non 2023-09-15\n\nMedium CVE-2023-5479: Inappropriate implementation in Extensions API.\nReported by Axel Chong on 2023-08-09\n\nLow CVE-2023-5485: Inappropriate implementation in Autofill. Reported by\nAhmed ElMasry on 2022-12-02\n\nLow CVE-2023-5478: Inappropriate implementation in Autofill. Reported by\nAhmed ElMasry on 2023-08-12\n\nLow CVE-2023-5477: Inappropriate implementation in Installer. Reported\nby Bahaa Naamneh of Crosspoint Labs on 2023-08-13\n\nLow CVE-2023-5486: Inappropriate implementation in Input. Reported by\nHafiizh on 2022-08-29\n\nLow CVE-2023-5473: Use after free in Cast. Reported by DarkNavy on\n2023-09-18\n\nNote: Access to bug details and links may be kept restricted until a\nmajority of users are updated with a fix. We will also retain\nrestrictions if the bug exists in a third party library that other\nprojects similarly depend on, but haven’t yet fixed.\n","status":"published","published":"2023-10-19T16:11:51Z","modified":"2026-04-16T04:44:00.168485591Z","updated_at":"2026-11-02T15:49:42.263076Z"},{"id":"openSUSE-SU-2023:0300-1","title":"Security update for chromium","description":"This update for chromium fixes the following issues:\n\nChromium 118.0.5993.70 (boo#1216111)\n\n- CVE-2023-5218: Use after free in Site Isolation\n- CVE-2023-5487: Inappropriate implementation in Fullscreen\n- CVE-2023-5484: Inappropriate implementation in Navigation\n- CVE-2023-5475: Inappropriate implementation in DevTools\n- CVE-2023-5483: Inappropriate implementation in Intents\n- CVE-2023-5481: Inappropriate implementation in Downloads\n- CVE-2023-5476: Use after free in Blink History\n- CVE-2023-5474: Heap buffer overflow in PDF\n- CVE-2023-5479: Inappropriate implementation in Extensions API\n- CVE-2023-5485: Inappropriate implementation in Autofill\n- CVE-2023-5478: Inappropriate implementation in Autofill\n- CVE-2023-5477: Inappropriate implementation in Installer\n- CVE-2023-5486: Inappropriate implementation in Input\n- CVE-2023-5473: Use after free in Cast\n","status":"published","published":"2023-10-13T08:14:00Z","modified":"2025-05-07T18:15:28.440247Z","updated_at":"2026-11-02T16:58:32.653274Z"},{"id":"openSUSE-SU-2023:0337-1","title":"Security update for opera","description":"This update for opera fixes the following issues:\n\n- Update to 104.0.4944.23\n  * DNA-110465 [Scrollable tab strip] Weird animation when\n    closing tab\n  * DNA-112021 Favicons disappear from history after being\n    hovered over\n  * DNA-112310 Put opening animation on start page behind a flag\n  * DNA-112462 Crash at opera::SidebarItemViewImpl::\n    StateChanged(views::Button::ButtonState)\n  * DNA-112464 Crash at anonymous namespace::SwitchToTabButton::\n    OnThemeChanged()\n  * DNA-112518 Force Default as last used Profile\n  * DNA-112534 Set profiles_order to Default dir\n\n- Changes in 104.0.4944.18\n  * CHR-9471 Update Chromium on desktop-stable-118-4944 to\n    118.0.5993.71\n  * DNA-111704 chrome.webRequest.onHeadersReceived event is not\n    fired for extension if page opened from SpeedDial tile\n  * DNA-111878 Highlighting of tabs and bookmarks in dark mode is\n    almost invisible.\n  * DNA-111883 [Address bar] Hover effect on page is placed\n    too high\n  * DNA-111922 [Linux] Change Opera beta application icon\n  * DNA-111955 Reduce colors used in Opera as much as possible\n  * DNA-112075 Rename palette colors in theme for better\n    reusability\n  * DNA-112108 Fix dangling WebContents ptr bound to\n    TabSnoozeInfobarDelegate::Show callback\n  * DNA-112222 Tab in island not marked as active\n  * DNA-112242 Disable feature flag #platform-h264-decoder-in-gpu\n    by default on stable channel\n  * DNA-112265 Promote 104 to stable\n  * DNA-112312 Turn on #wallet-selector on all streams\n  * DNA-112313 Enable #pinboard-popup-refresh on all streams\n  * DNA-112426 [profile migration] Renaming invalid Default to\n    Default.old is not needed anymore\n- The update to chromium 118.0.5993.71 fixes following issues:\n  CVE-2023-5218, CVE-2023-5487, CVE-2023-5484, CVE-2023-5475,\n  CVE-2023-5483, CVE-2023-5481, CVE-2023-5476, CVE-2023-5474,\n  CVE-2023-5479, CVE-2023-5485, CVE-2023-5478, CVE-2023-5477,\n  CVE-2023-5486, CVE-2023-5473\n- Complete Opera 104 changelog at:\n  https://blogs.opera.com/desktop/changelog-for-104/  \n\n- Update to 103.0.4928.34\n  * DNA-111680 Fix highlight of bookmarks bar folder elements\n  * DNA-111703 O icon moves upon opening menu\n  * DNA-111883 [Address bar] Hover effect on page is placed\n    too high\n  * DNA-111940 OMenu text displaced to the right without\n    any indentation\n  * DNA-112118 Crash at history::URLDatabase::\n    CreateContinueOnIndexIfNeeded(std::__Cr::vector)\n\n- Update to 103.0.4928.26\n  * DNA-111681 Disappearing icons of bookmarks bar folders elements\n  * DNA-112020 Enable #address-bar-dropdown-cities on all streams\n","status":"published","published":"2023-10-29T05:01:20Z","modified":"2025-05-07T18:15:28.502996Z","updated_at":"2026-11-02T16:58:32.653274Z"},{"id":"openSUSE-SU-2023:0338-1","title":"Security update for opera","description":"This update for opera fixes the following issues:\n\n- Update to 104.0.4944.23\n  * DNA-110465 [Scrollable tab strip] Weird animation when\n    closing tab\n  * DNA-112021 Favicons disappear from history after being\n    hovered over\n  * DNA-112310 Put opening animation on start page behind a flag\n  * DNA-112462 Crash at opera::SidebarItemViewImpl::\n    StateChanged(views::Button::ButtonState)\n  * DNA-112464 Crash at anonymous namespace::SwitchToTabButton::\n    OnThemeChanged()\n  * DNA-112518 Force Default as last used Profile\n  * DNA-112534 Set profiles_order to Default dir\n\n- Changes in 104.0.4944.18\n  * CHR-9471 Update Chromium on desktop-stable-118-4944 to\n    118.0.5993.71\n  * DNA-111704 chrome.webRequest.onHeadersReceived event is not\n    fired for extension if page opened from SpeedDial tile\n  * DNA-111878 Highlighting of tabs and bookmarks in dark mode is\n    almost invisible.\n  * DNA-111883 [Address bar] Hover effect on page is placed\n    too high\n  * DNA-111922 [Linux] Change Opera beta application icon\n  * DNA-111955 Reduce colors used in Opera as much as possible\n  * DNA-112075 Rename palette colors in theme for better\n    reusability\n  * DNA-112108 Fix dangling WebContents ptr bound to\n    TabSnoozeInfobarDelegate::Show callback\n  * DNA-112222 Tab in island not marked as active\n  * DNA-112242 Disable feature flag #platform-h264-decoder-in-gpu\n    by default on stable channel\n  * DNA-112265 Promote 104 to stable\n  * DNA-112312 Turn on #wallet-selector on all streams\n  * DNA-112313 Enable #pinboard-popup-refresh on all streams\n  * DNA-112426 [profile migration] Renaming invalid Default to\n    Default.old is not needed anymore\n- The update to chromium 118.0.5993.71 fixes following issues:\n  CVE-2023-5218, CVE-2023-5487, CVE-2023-5484, CVE-2023-5475,\n  CVE-2023-5483, CVE-2023-5481, CVE-2023-5476, CVE-2023-5474,\n  CVE-2023-5479, CVE-2023-5485, CVE-2023-5478, CVE-2023-5477,\n  CVE-2023-5486, CVE-2023-5473\n- Complete Opera 104 changelog at:\n  https://blogs.opera.com/desktop/changelog-for-104/  \n\n- Update to 103.0.4928.34\n  * DNA-111680 Fix highlight of bookmarks bar folder elements\n  * DNA-111703 O icon moves upon opening menu\n  * DNA-111883 [Address bar] Hover effect on page is placed\n    too high\n  * DNA-111940 OMenu text displaced to the right without\n    any indentation\n  * DNA-112118 Crash at history::URLDatabase::\n    CreateContinueOnIndexIfNeeded(std::__Cr::vector)\n\n- Update to 103.0.4928.26\n  * DNA-111681 Disappearing icons of bookmarks bar folders elements\n  * DNA-112020 Enable #address-bar-dropdown-cities on all streams\n","status":"published","published":"2023-10-29T05:01:23Z","modified":"2025-05-07T18:15:28.564946Z","updated_at":"2026-11-02T16:58:32.653274Z"},{"id":"openSUSE-SU-2024:13317-1","title":"chromedriver-118.0.5993.70-1.1 on GA media","description":"These are all security issues fixed in the chromedriver-118.0.5993.70-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:47:24.645449Z","updated_at":"2026-11-02T16:58:36.025801Z"},{"id":"openSUSE-SU-2024:13335-1","title":"ungoogled-chromium-118.0.5993.70-1.1 on GA media","description":"These are all security issues fixed in the ungoogled-chromium-118.0.5993.70-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:12:36.299316Z","updated_at":"2026-11-02T16:58:36.327643Z"}]}}