{"id":"CVE-2023-5997","aliases":["ALPINE-CVE-2023-5997","DEBIAN-CVE-2023-5997","DSA-5556-1","EUVD-2023-58264","GHSA-fggx-frxq-cpx8","MGASA-2023-0322","openSUSE-SU-2023:0372-1","openSUSE-SU-2023:0385-1","openSUSE-SU-2023:0386-1","openSUSE-SU-2024:13424-1","openSUSE-SU-2024:13447-1","openSUSE-SU-2024:14001-1"],"status":"published","title":"Use after free in Garbage Collection in Google Chrome prior to 119.0.6045.159 allowed a remote...","description":"Use after free in Garbage Collection in Google Chrome prior to 119.0.6045.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01021,"percentile":0.6367,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-416"],"published":"2023-11-15T00:00:00Z","modified":"2026-11-03T06:32:59Z","fixes":[{"ecosystem":"Alpine:v3.18","package":"qt5-qtwebengine","fixed_in":["5.15.13-r12"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"qt5-qtwebengine","fixed_in":["5.15.16-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"qt5-qtwebengine","fixed_in":["5.15.16-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"qt5-qtwebengine","fixed_in":["5.15.16-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"qt5-qtwebengine","fixed_in":["5.15.16-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"qt5-qtwebengine","fixed_in":["5.15.16-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"qt6-qtwebengine","fixed_in":["6.6.0-r6"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"qt6-qtwebengine","fixed_in":["6.6.0-r6"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"qt6-qtwebengine","fixed_in":["6.6.0-r6"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"qt6-qtwebengine","fixed_in":["6.6.0-r6"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"qt6-qtwebengine","fixed_in":["6.6.0-r6"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"qt6-qtwebengine","fixed_in":["6.6.0-r6"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"chromium","fixed_in":["119.0.6045.159-1~deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"chromium","fixed_in":["119.0.6045.159-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"chromium","fixed_in":["119.0.6045.159-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.18","package":"qt5-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.13-r12"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"qt5-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.16-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"qt5-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.16-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"qt5-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.16-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"qt5-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.16-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"qt5-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.16-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"qt6-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6.0-r6"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"qt6-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6.0-r6"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"qt6-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6.0-r6"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"qt6-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6.0-r6"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"qt6-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6.0-r6"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"qt6-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6.0-r6"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"chromium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"119.0.6045.159-1~deb12u1"}]}],"versions":["113.0.5672.126-1","114.0.5735.106-1","114.0.5735.106-1~deb11u1","114.0.5735.106-1~deb12u1","114.0.5735.133-1","114.0.5735.133-1~deb11u1","114.0.5735.133-1~deb12u1","114.0.5735.198-1","114.0.5735.198-1~deb11u1","114.0.5735.198-1~deb12u1","114.0.5735.90-1","114.0.5735.90-2","114.0.5735.90-2~deb11u1","114.0.5735.90-2~deb12u1","115.0.5790.102-1","115.0.5790.102-2","115.0.5790.170-1","115.0.5790.170-1~deb11u1","115.0.5790.170-1~deb12u1","115.0.5790.98-1","115.0.5790.98-1~deb11u1","115.0.5790.98-1~deb12u1","115.0.5790.98-2","116.0.5845.110-1","116.0.5845.110-1~deb11u1","116.0.5845.110-1~deb12u1","116.0.5845.110-2","116.0.5845.140-1","116.0.5845.140-1~deb11u1","116.0.5845.140-1~deb12u1","116.0.5845.180-1","116.0.5845.180-1~deb11u1","116.0.5845.180-1~deb12u1","116.0.5845.96-1","116.0.5845.96-1~deb11u1","116.0.5845.96-1~deb12u1","116.0.5845.96-2","117.0.5938.132-1","117.0.5938.132-1~deb11u1","117.0.5938.132-1~deb12u1","117.0.5938.132-2","117.0.5938.149-1","117.0.5938.149-1~deb11u1","117.0.5938.149-1~deb12u1","117.0.5938.62-1","117.0.5938.62-1~deb11u1","117.0.5938.62-1~deb12u1","117.0.5938.92-1","118.0.5993.117-1","118.0.5993.117-1~deb11u1","118.0.5993.117-1~deb12u1","118.0.5993.70-1","118.0.5993.70-1~deb11u1","118.0.5993.70-1~deb12u1","119.0.6045.105-1","119.0.6045.105-1~deb11u1","119.0.6045.105-1~deb12u1","119.0.6045.123-1","119.0.6045.123-1~deb11u1","119.0.6045.123-1~deb12u1","119.0.6045.159-1~deb11u1"]},{"source":"osv","ecosystem":"Debian:13","package":"chromium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"119.0.6045.159-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"chromium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"119.0.6045.159-1"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"chromium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"119.0.6045.159-1~deb11u1"}]}],"versions":["100.0.4896.127-1","100.0.4896.127-1~deb11u1","100.0.4896.60-1","100.0.4896.60-1~deb11u1","100.0.4896.75-1","100.0.4896.75-1~deb11u1","100.0.4896.88-1","100.0.4896.88-1~deb11u1","101.0.4951.41-1","101.0.4951.41-1~deb11u1","101.0.4951.41-2","101.0.4951.54-1","101.0.4951.64-1","101.0.4951.64-1~deb11u1","102.0.5005.115-1","102.0.5005.115-1~deb11u1","102.0.5005.61-1","102.0.5005.61-1~deb11u1","103.0.5060.114-1","103.0.5060.114-1~deb11u1","103.0.5060.134-1","103.0.5060.134-1~deb11u1","103.0.5060.53-1","103.0.5060.53-1~deb11u1","104.0.5112.101-1","104.0.5112.101-1~deb11u1","104.0.5112.79-1","104.0.5112.79-1~deb11u1","105.0.5195.102-1","105.0.5195.102-1~deb11u1","105.0.5195.125-1","105.0.5195.125-1~deb11u1","105.0.5195.52-1","105.0.5195.52-1~deb11u1","106.0.5249.103-1","106.0.5249.103-2","106.0.5249.119-1","106.0.5249.119-1~deb11u1","106.0.5249.61-1","106.0.5249.61-1~deb11u1","106.0.5249.91-1","106.0.5249.91-1~deb11u1","107.0.5304.110-1","107.0.5304.110-1~deb11u1","107.0.5304.110-2","107.0.5304.121-1","107.0.5304.121-1~deb11u1","107.0.5304.68-1","107.0.5304.68-1~deb11u1","107.0.5304.87-1","107.0.5304.87-1~deb11u1","108.0.5359.124-1","108.0.5359.124-1~deb11u1","108.0.5359.71-1","108.0.5359.71-2","108.0.5359.71-2~deb11u1","108.0.5359.94-1","108.0.5359.94-1~deb11u1","109.0.5414.119-1","109.0.5414.119-1~deb11u1","109.0.5414.74-1","109.0.5414.74-2","109.0.5414.74-2~deb11u1","110.0.5481.177-1","110.0.5481.177-1~deb11u1","110.0.5481.77-1","110.0.5481.77-1~deb11u1","110.0.5481.77-2","111.0.5563.110-1","111.0.5563.110-1~deb11u1","111.0.5563.64-1","111.0.5563.64-1~deb11u1","112.0.5615.121-1","112.0.5615.121-1~deb11u1","112.0.5615.138-1","112.0.5615.138-1~deb11u1","112.0.5615.49-1","112.0.5615.49-2","112.0.5615.49-2~deb11u1","112.0.5615.49-2~deb11u2","113.0.5672.126-1","113.0.5672.126-1~deb11u1","113.0.5672.63-1","113.0.5672.63-1~deb11u1","113.0.5672.63-2","114.0.5735.106-1","114.0.5735.106-1~deb11u1","114.0.5735.106-1~deb12u1","114.0.5735.133-1","114.0.5735.133-1~deb11u1","114.0.5735.133-1~deb12u1","114.0.5735.198-1","114.0.5735.198-1~deb11u1","114.0.5735.198-1~deb12u1","114.0.5735.90-1","114.0.5735.90-2","114.0.5735.90-2~deb11u1","114.0.5735.90-2~deb12u1","115.0.5790.102-1","115.0.5790.102-2","115.0.5790.170-1","115.0.5790.170-1~deb11u1","115.0.5790.170-1~deb12u1","115.0.5790.98-1","115.0.5790.98-1~deb11u1","115.0.5790.98-1~deb12u1","115.0.5790.98-2","116.0.5845.110-1","116.0.5845.110-1~deb11u1","116.0.5845.110-1~deb12u1","116.0.5845.110-2","116.0.5845.140-1","116.0.5845.140-1~deb11u1","116.0.5845.140-1~deb12u1","116.0.5845.180-1","116.0.5845.180-1~deb11u1","116.0.5845.180-1~deb12u1","116.0.5845.96-1","116.0.5845.96-1~deb11u1","116.0.5845.96-1~deb12u1","116.0.5845.96-2","117.0.5938.132-1","117.0.5938.132-1~deb11u1","117.0.5938.132-1~deb12u1","117.0.5938.132-2","117.0.5938.149-1","117.0.5938.149-1~deb11u1","117.0.5938.149-1~deb12u1","117.0.5938.62-1","117.0.5938.62-1~deb11u1","117.0.5938.62-1~deb12u1","117.0.5938.92-1","118.0.5993.117-1","118.0.5993.117-1~deb11u1","118.0.5993.117-1~deb12u1","118.0.5993.70-1","118.0.5993.70-1~deb11u1","118.0.5993.70-1~deb12u1","119.0.6045.105-1","119.0.6045.105-1~deb11u1","119.0.6045.105-1~deb12u1","119.0.6045.123-1","119.0.6045.123-1~deb11u1","119.0.6045.123-1~deb12u1","90.0.4430.212-1","93.0.4577.82-1","97.0.4692.71-0.1","97.0.4692.71-0.1~deb11u1","97.0.4692.99-1","97.0.4692.99-1~deb11u1","97.0.4692.99-1~deb11u2","98.0.4758.102-1","98.0.4758.102-1~deb11u1","98.0.4758.80-1","98.0.4758.80-1~deb11u1","99.0.4818.0-0.1","99.0.4844.51-1","99.0.4844.51-1~deb11u1","99.0.4844.51-2","99.0.4844.74-1","99.0.4844.74-1~deb11u1","99.0.4844.84-1","99.0.4844.84-1~deb11u1"],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"chromium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"119.0.6045.159-1~deb12u1"}]}],"versions":["113.0.5672.126-1","114.0.5735.106-1","114.0.5735.106-1~deb11u1","114.0.5735.106-1~deb12u1","114.0.5735.133-1","114.0.5735.133-1~deb11u1","114.0.5735.133-1~deb12u1","114.0.5735.198-1","114.0.5735.198-1~deb11u1","114.0.5735.198-1~deb12u1","114.0.5735.90-1","114.0.5735.90-2","114.0.5735.90-2~deb11u1","114.0.5735.90-2~deb12u1","115.0.5790.102-1","115.0.5790.102-2","115.0.5790.170-1","115.0.5790.170-1~deb11u1","115.0.5790.170-1~deb12u1","115.0.5790.98-1","115.0.5790.98-1~deb11u1","115.0.5790.98-1~deb12u1","115.0.5790.98-2","116.0.5845.110-1","116.0.5845.110-1~deb11u1","116.0.5845.110-1~deb12u1","116.0.5845.110-2","116.0.5845.140-1","116.0.5845.140-1~deb11u1","116.0.5845.140-1~deb12u1","116.0.5845.180-1","116.0.5845.180-1~deb11u1","116.0.5845.180-1~deb12u1","116.0.5845.96-1","116.0.5845.96-1~deb11u1","116.0.5845.96-1~deb12u1","116.0.5845.96-2","117.0.5938.132-1","117.0.5938.132-1~deb11u1","117.0.5938.132-1~deb12u1","117.0.5938.132-2","117.0.5938.149-1","117.0.5938.149-1~deb11u1","117.0.5938.149-1~deb12u1","117.0.5938.62-1","117.0.5938.62-1~deb11u1","117.0.5938.62-1~deb12u1","117.0.5938.92-1","118.0.5993.117-1","118.0.5993.117-1~deb11u1","118.0.5993.117-1~deb12u1","118.0.5993.70-1","118.0.5993.70-1~deb11u1","118.0.5993.70-1~deb12u1","119.0.6045.105-1","119.0.6045.105-1~deb11u1","119.0.6045.105-1~deb12u1","119.0.6045.123-1","119.0.6045.123-1~deb11u1","119.0.6045.123-1~deb12u1","119.0.6045.159-1~deb11u1"],"bundled":2},{"source":"osv","ecosystem":"Mageia:9","package":"chromium-browser-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"119.0.6045.159-1.mga9.tainted"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP4","package":"chromium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"119.0.6045.159-bp155.2.58.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP5","package":"chromium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"119.0.6045.159-bp155.2.58.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"chromium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"119.0.6045.159-bp155.2.58.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"chromium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"119.0.6045.159-bp155.2.58.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.4 NonFree","package":"opera","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"105.0.4970.21-lp154.2.62.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.5 NonFree","package":"opera","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"105.0.4970.21-lp155.3.21.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"chromium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"119.0.6045.159-1.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"chromium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"119.0.6045.159-1.1"}]}],"bundled":2}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"google","product":"chrome"}],"references":[{"url":"https://chromereleases.googleblog.com/2023/11/stable-channel-update-for-desktop_14.html","tags":["x_transferred","Release Notes","Vendor Advisory","advisory","web"]},{"url":"https://crbug.com/1497997","tags":["x_transferred","Permissions Required","report"]},{"url":"https://www.debian.org/security/2023/dsa-5556","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XWHRLW3GDNFBFSBHDD4QOPUPX7ORTUEC/","tags":["x_transferred","Mailing List","article"]},{"url":"https://security.gentoo.org/glsa/202311-11","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JHUI5HW7QXT3U74MJMTLUMF5REDO5HD5/","tags":["x_transferred","Mailing List","article"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MN3JQGEC4EFQP3WTI33YBD3CLC3I7P4X/","tags":["x_transferred","Mailing List","article"]},{"url":"https://security.gentoo.org/glsa/202312-07","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"https://security.gentoo.org/glsa/202401-34","tags":["x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5997"},{"url":"https://github.com/advisories/GHSA-fggx-frxq-cpx8"},{"url":"https://security.alpinelinux.org/vuln/CVE-2023-5997","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-5997","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2023-0322.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=32529","tags":["report"]},{"url":"https://chromereleases.googleblog.com/2023/11/stable-channel-update-for-desktop.html","tags":["web"]},{"url":"https://chromereleases.googleblog.com/2023/10/stable-channel-update-for-desktop_31.html","tags":["web"]},{"url":"https://www.gearrice.com/update/chrome-119-backs-up-and-finally-syncs-your-tabs/","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JILQXJ3DNE4GJU72FHTLKQFBFKZIZWSV/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1217142","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5997","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-6112","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VPV6XY6LXPJXCOKW6JTLRHMNB4XCYJ7Q/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TS7DENNWXUXU3ROQQDHEYSOBWA6FR367/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2023-6345","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-6347","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-6510","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-6702","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-7024","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-0222","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-0224","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-0333","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-0518","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-0519","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-0807","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-0808","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-1059","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-1060","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-1077","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-1283","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2023-5997","description":"Use after free in Garbage Collection in Google Chrome prior to 119.0.6045.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)","status":"published","published":"2023-11-15T17:19:43.599Z","modified":"2025-12-16T18:23:27.065Z","updated_at":"2026-11-02T14:35:17.149492Z"}],"euvd":[{"id":"EUVD-2023-58264","description":"Use after free in Garbage Collection in Google Chrome prior to 119.0.6045.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)","status":"published","published":"2023-11-15T17:19:43Z","modified":"2025-12-16T18:23:27Z","updated_at":"2026-11-02T19:49:04.015486Z"}],"ghsa":[{"id":"GHSA-fggx-frxq-cpx8","title":"Use after free in Garbage Collection in Google Chrome prior to 119.0.6045.159 allowed a remote...","description":"Use after free in Garbage Collection in Google Chrome prior to 119.0.6045.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)","status":"published","published":"2023-11-15T18:30:22Z","modified":"2024-02-09T05:12:56Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:55:35.197353Z"}],"nvd":[{"id":"CVE-2023-5997","description":"Use after free in Garbage Collection in Google Chrome prior to 119.0.6045.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)","status":"published","published":"2023-11-15T18:15:06.873Z","modified":"2026-06-17T06:49:49.417Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:08:47.966245Z"}],"osv":[{"id":"ALPINE-CVE-2023-5997","description":"Use after free in Garbage Collection in Google Chrome prior to 119.0.6045.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)","status":"published","published":"2023-11-15T18:15:06.873Z","modified":"2026-11-03T06:32:59.539839633Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T07:16:09.603409Z"},{"id":"CVE-2023-5997","description":"Use after free in Garbage Collection in Google Chrome prior to 119.0.6045.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)","status":"published","published":"2023-11-15T18:15:06.873Z","modified":"2026-04-16T04:36:25.557053124Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:36.851042Z"},{"id":"DEBIAN-CVE-2023-5997","description":"Use after free in Garbage Collection in Google Chrome prior to 119.0.6045.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)","status":"published","published":"2023-11-15T18:15:06.873Z","modified":"2026-10-26T18:03:10.32680894Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:41.533064Z"},{"id":"DSA-5556-1","title":"chromium - security update","status":"published","published":"2023-11-15T00:00:00Z","modified":"2026-03-09T02:09:18.235994Z","updated_at":"2026-11-02T15:46:17.892347Z"},{"id":"MGASA-2023-0322","title":"Updated chromium-browser-stable packages fix bugs and vulnerabilities","description":"The chromium-browser-stable package has been updated to the\n119.0.6045.159 release, fixing bugs and 15 vulnerabilities, together\nwith 119.0.6045.123 and 119.0.6045.105; some of them are listed below:\n\nHigh CVE-2023-5480: Inappropriate implementation in Payments. Reported\nby Vsevolod Kokorin (Slonser) of Solidlab on 2023-10-14\n\nHigh CVE-2023-5482: Insufficient data validation in USB. Reported by\nDarkNavy on 2023-10-13\n\nHigh CVE-2023-5849: Integer overflow in USB. Reported by DarkNavy on\n2023-10-13\n\nHigh CVE-2023-5996: Use after free in WebAudio. Reported by Huang Xilin\nof Ant Group Light-Year Security Lab via Tianfu Cup 2023 on 2023-10-30\n\nHigh CVE-2023-5997: Use after free in Garbage Collection. Reported by\nAnonymous on 2023-10-31\n\nHigh CVE-2023-6112: Use after free in Navigation. Reported by Sergei\nGlazunov of Google Project Zero on 2023-11-04\n\nMedium CVE-2023-5850: Incorrect security UI in Downloads. Reported by\nMohit Raj (shadow2639)  on 2021-12-22\n\nMedium CVE-2023-5851: Inappropriate implementation in Downloads.\nReported by Shaheen Fazim on 2023-08-18\n\nMedium CVE-2023-5852: Use after free in Printing. Reported by [pwn2car]\non 2023-09-10\n\nMedium CVE-2023-5853: Incorrect security UI in Downloads. Reported by\nHafiizh on 2023-06-22\n\nMedium CVE-2023-5854: Use after free in Profiles. Reported by Dohyun Lee\n(@l33d0hyun) of SSD-Disclosure Labs \u0026 DNSLab, Korea Univ on 2023-10-01\n\nMedium CVE-2023-5855: Use after free in Reading Mode. Reported by\nChaobinZhang on 2023-10-13\n\nMedium CVE-2023-5856: Use after free in Side Panel. Reported by Weipeng\nJiang (@Krace) of VRI on 2023-10-17\n\nMedium CVE-2023-5857: Inappropriate implementation in Downloads.\nReported by Will Dormann on 2023-10-18\n\nLow CVE-2023-5858: Inappropriate implementation in WebApp Provider.\nReported by Axel Chong on 2023-06-24\n\nLow CVE-2023-5859: Incorrect security UI in Picture In Picture. Reported\nby Junsung Lee on 2023-09-13\n","status":"published","published":"2023-11-20T10:04:11Z","modified":"2026-04-16T04:42:54.165228642Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"openSUSE-SU-2023:0372-1","title":"Security update for chromium","description":"This update for chromium fixes the following issues:\n\nChromium 119.0.6045.159 (boo#1217142)\n\n  * CVE-2023-5997: Use after free in Garbage Collection\n  * CVE-2023-6112: Use after free in Navigation\n  * Various fixes from internal audits, fuzzing and other initiatives\n","status":"published","published":"2023-11-16T07:59:47Z","modified":"2026-02-04T03:56:06.951806Z","updated_at":"2026-11-02T16:58:32.653274Z"},{"id":"openSUSE-SU-2023:0385-1","title":"Security update for opera","description":"This update for opera fixes the following issues:\n\n- Update to 105.0.4970.21\n  * DNA-112425 Choosing Workspace Icons doesn’t work as expected\n  * DNA-112787 glow around tiles in Top Sites section in BABE in\n    dark theme\n- The update to chromium 119.0.6045.159 fixes following issues:\n  CVE-2023-5997, CVE-2023-6112\n\n- Update to 105.0.4970.16\n  * CHR-9416 Updating Chromium on desktop-stable-* branches\n  * DNA-111903 [Lin] [Component-based-scrollbar] Old design is\n    displayed on Ubuntu 20.04\n  * DNA-112914 Visual glitch with HWA enabled in some random places\n  * DNA-113137 [WinLin][Sidebar autohide] Sidebar panel is not\n    connected with sidebar\n\n- Update to 105.0.4970.13\n  * CHR-9416 Updating Chromium on desktop-stable-* branches\n  * DNA-111885 [Address bar] Hover effect on padlock icon is not\n    rounded\n  * DNA-112411 Active Tab in Tab Island in Dark Mode should have\n    different colour\n  * DNA-112431 Dragging tab quickly past last island on the right,\n    causes tab to be dropped at the end of tab strip instead\n    of at location of the cursor\n  * DNA-112878 [Tab strip] Detached tab not restored after\n    restarting browser\n  * DNA-112900 Crash at opera::component_based::\n    ComponentTabDragController::StopViewDragging\n  * DNA-112996 Translations for O105\n  * DNA-113213 Promote 105 to stable\n- Complete Opera 105 changelog at:\n  https://blogs.opera.com/desktop/changelog-for-105/\n\n- Update to 104.0.4944.54\n  * DNA-111938 Option 'Automatically hide sidebar' and Full screen\n    makes Opera freeze\n  * DNA-112241 Stuttering video on some systems with OOP\n    SW H.264 decoding\n  * DNA-112636 [Tab strip] Detach button on meeting tabs moves\n    on hover and is replaced by close tab\n  * DNA-112862 Crash at extensions::BookmarksPrivateAPI::\n    OnListenerAdded(extensions::EventListenerInfo const\u0026)\n  * DNA-112990 Crash when closing tab tooltip and opening\n    Search tabs\n","status":"published","published":"2023-11-30T10:48:02Z","modified":"2026-02-04T04:11:35.277497Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"openSUSE-SU-2023:0386-1","title":"Security update for opera","description":"This update for opera fixes the following issues:\n\n- Update to 105.0.4970.21\n  * DNA-112425 Choosing Workspace Icons doesn’t work as expected\n  * DNA-112787 glow around tiles in Top Sites section in BABE in\n    dark theme\n- The update to chromium 119.0.6045.159 fixes following issues:\n  CVE-2023-5997, CVE-2023-6112\n\n- Update to 105.0.4970.16\n  * CHR-9416 Updating Chromium on desktop-stable-* branches\n  * DNA-111903 [Lin] [Component-based-scrollbar] Old design is\n    displayed on Ubuntu 20.04\n  * DNA-112914 Visual glitch with HWA enabled in some random places\n  * DNA-113137 [WinLin][Sidebar autohide] Sidebar panel is not\n    connected with sidebar\n\n- Update to 105.0.4970.13\n  * CHR-9416 Updating Chromium on desktop-stable-* branches\n  * DNA-111885 [Address bar] Hover effect on padlock icon is not\n    rounded\n  * DNA-112411 Active Tab in Tab Island in Dark Mode should have\n    different colour\n  * DNA-112431 Dragging tab quickly past last island on the right,\n    causes tab to be dropped at the end of tab strip instead\n    of at location of the cursor\n  * DNA-112878 [Tab strip] Detached tab not restored after\n    restarting browser\n  * DNA-112900 Crash at opera::component_based::\n    ComponentTabDragController::StopViewDragging\n  * DNA-112996 Translations for O105\n  * DNA-113213 Promote 105 to stable\n- Complete Opera 105 changelog at:\n  https://blogs.opera.com/desktop/changelog-for-105/\n\n- Update to 104.0.4944.54\n  * DNA-111938 Option 'Automatically hide sidebar' and Full screen\n    makes Opera freeze\n  * DNA-112241 Stuttering video on some systems with OOP\n    SW H.264 decoding\n  * DNA-112636 [Tab strip] Detach button on meeting tabs moves\n    on hover and is replaced by close tab\n  * DNA-112862 Crash at extensions::BookmarksPrivateAPI::\n    OnListenerAdded(extensions::EventListenerInfo const\u0026)\n  * DNA-112990 Crash when closing tab tooltip and opening\n    Search tabs\n","status":"published","published":"2023-11-30T10:48:21Z","modified":"2026-02-04T03:01:24.003997Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"openSUSE-SU-2024:13424-1","title":"chromedriver-119.0.6045.159-1.1 on GA media","description":"These are all security issues fixed in the chromedriver-119.0.6045.159-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:28:56.550972Z","updated_at":"2026-11-02T16:58:36.327643Z"},{"id":"openSUSE-SU-2024:13447-1","title":"ungoogled-chromium-119.0.6045.159-1.1 on GA media","description":"These are all security issues fixed in the ungoogled-chromium-119.0.6045.159-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:50:35.891453Z","updated_at":"2026-11-02T16:58:36.327643Z"},{"id":"openSUSE-SU-2024:14001-1","title":"libQt5Pdf5-5.15.17-1.1 on GA media","description":"These are all security issues fixed in the libQt5Pdf5-5.15.17-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:38:22.195524Z","updated_at":"2026-11-02T16:58:36.662953Z"}]}}