nvd-json-data-feeds/CVE-2023/CVE-2023-21xx/CVE-2023-2136.json

{
  "id": "CVE-2023-2136",
  "sourceIdentifier": "chrome-cve-admin@google.com",
  "published": "2023-04-19T04:15:31.607",
  "lastModified": "2023-04-23T12:15:14.170",
  "vulnStatus": "Awaiting Analysis",
  "cisaExploitAdd": "2023-04-21",
  "cisaActionDue": "2023-05-12",
  "cisaRequiredAction": "Apply updates per vendor instructions.",
  "cisaVulnerabilityName": "Google Chrome Skia Integer Overflow Vulnerability",
  "descriptions": [
    {
      "lang": "en",
      "value": "Integer overflow in Skia in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)"
    }
  ],
  "metrics": {},
  "references": [
    {
      "url": "https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop_18.html",
      "source": "chrome-cve-admin@google.com"
    },
    {
      "url": "https://crbug.com/1432603",
      "source": "chrome-cve-admin@google.com"
    },
    {
      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4AOSGAOPXLBK4A5ZRTVZ4M6QKVLSWMWG/",
      "source": "chrome-cve-admin@google.com"
    },
    {
      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FEJZMAUB4XP44HSHEBDWEKFGA7DUHY42/",
      "source": "chrome-cve-admin@google.com"
    },
    {
      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RJQI63HWZFL6M26Q6UOHKDY6LD2PFC5Z/",
      "source": "chrome-cve-admin@google.com"
    },
    {
      "url": "https://www.debian.org/security/2023/dsa-5393",
      "source": "chrome-cve-admin@google.com"
    }
  ]
}