Auto-Update: 2023-11-29T13:00:18.809429+00:00

2025-05-09 03:57:14 +00:00 · 2023-11-29 13:00:22 +00:00 · 2023-11-29 13:00:22 +00:00 · 14645c3028
commit 14645c3028
parent aae6a96fed
8 changed files with 199 additions and 9 deletions
--- a/CVE-2023/CVE-2023-63xx/CVE-2023-6345.json
+++ b/CVE-2023/CVE-2023-63xx/CVE-2023-6345.json
@ -0,0 +1,24 @@
+{
+  "id": "CVE-2023-6345",
+  "sourceIdentifier": "chrome-cve-admin@google.com",
+  "published": "2023-11-29T12:15:07.077",
+  "lastModified": "2023-11-29T12:15:07.077",
+  "vulnStatus": "Received",
+  "descriptions": [
+    {
+      "lang": "en",
+      "value": "Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High)"
+    }
+  ],
+  "metrics": {},
+  "references": [
+    {
+      "url": "https://chromereleases.googleblog.com/2023/11/stable-channel-update-for-desktop_28.html",
+      "source": "chrome-cve-admin@google.com"
+    },
+    {
+      "url": "https://crbug.com/1505053",
+      "source": "chrome-cve-admin@google.com"
+    }
+  ]
+}
--- a/CVE-2023/CVE-2023-63xx/CVE-2023-6346.json
+++ b/CVE-2023/CVE-2023-63xx/CVE-2023-6346.json
@ -0,0 +1,24 @@
+{
+  "id": "CVE-2023-6346",
+  "sourceIdentifier": "chrome-cve-admin@google.com",
+  "published": "2023-11-29T12:15:07.310",
+  "lastModified": "2023-11-29T12:15:07.310",
+  "vulnStatus": "Received",
+  "descriptions": [
+    {
+      "lang": "en",
+      "value": "Use after free in WebAudio in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)"
+    }
+  ],
+  "metrics": {},
+  "references": [
+    {
+      "url": "https://chromereleases.googleblog.com/2023/11/stable-channel-update-for-desktop_28.html",
+      "source": "chrome-cve-admin@google.com"
+    },
+    {
+      "url": "https://crbug.com/1500856",
+      "source": "chrome-cve-admin@google.com"
+    }
+  ]
+}
--- a/CVE-2023/CVE-2023-63xx/CVE-2023-6347.json
+++ b/CVE-2023/CVE-2023-63xx/CVE-2023-6347.json
@ -0,0 +1,24 @@
+{
+  "id": "CVE-2023-6347",
+  "sourceIdentifier": "chrome-cve-admin@google.com",
+  "published": "2023-11-29T12:15:07.357",
+  "lastModified": "2023-11-29T12:15:07.357",
+  "vulnStatus": "Received",
+  "descriptions": [
+    {
+      "lang": "en",
+      "value": "Use after free in Mojo in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)"
+    }
+  ],
+  "metrics": {},
+  "references": [
+    {
+      "url": "https://chromereleases.googleblog.com/2023/11/stable-channel-update-for-desktop_28.html",
+      "source": "chrome-cve-admin@google.com"
+    },
+    {
+      "url": "https://crbug.com/1494461",
+      "source": "chrome-cve-admin@google.com"
+    }
+  ]
+}
--- a/CVE-2023/CVE-2023-63xx/CVE-2023-6348.json
+++ b/CVE-2023/CVE-2023-63xx/CVE-2023-6348.json
@ -0,0 +1,24 @@
+{
+  "id": "CVE-2023-6348",
+  "sourceIdentifier": "chrome-cve-admin@google.com",
+  "published": "2023-11-29T12:15:07.403",
+  "lastModified": "2023-11-29T12:15:07.403",
+  "vulnStatus": "Received",
+  "descriptions": [
+    {
+      "lang": "en",
+      "value": "Type Confusion in Spellcheck in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)"
+    }
+  ],
+  "metrics": {},
+  "references": [
+    {
+      "url": "https://chromereleases.googleblog.com/2023/11/stable-channel-update-for-desktop_28.html",
+      "source": "chrome-cve-admin@google.com"
+    },
+    {
+      "url": "https://crbug.com/1491459",
+      "source": "chrome-cve-admin@google.com"
+    }
+  ]
+}
--- a/CVE-2023/CVE-2023-63xx/CVE-2023-6350.json
+++ b/CVE-2023/CVE-2023-63xx/CVE-2023-6350.json
@ -0,0 +1,24 @@
+{
+  "id": "CVE-2023-6350",
+  "sourceIdentifier": "chrome-cve-admin@google.com",
+  "published": "2023-11-29T12:15:07.450",
+  "lastModified": "2023-11-29T12:15:07.450",
+  "vulnStatus": "Received",
+  "descriptions": [
+    {
+      "lang": "en",
+      "value": "Use after free in libavif in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption via a crafted avif file. (Chromium security severity: High)"
+    }
+  ],
+  "metrics": {},
+  "references": [
+    {
+      "url": "https://chromereleases.googleblog.com/2023/11/stable-channel-update-for-desktop_28.html",
+      "source": "chrome-cve-admin@google.com"
+    },
+    {
+      "url": "https://crbug.com/1501766",
+      "source": "chrome-cve-admin@google.com"
+    }
+  ]
+}
--- a/CVE-2023/CVE-2023-63xx/CVE-2023-6351.json
+++ b/CVE-2023/CVE-2023-63xx/CVE-2023-6351.json
@ -0,0 +1,24 @@
+{
+  "id": "CVE-2023-6351",
+  "sourceIdentifier": "chrome-cve-admin@google.com",
+  "published": "2023-11-29T12:15:07.497",
+  "lastModified": "2023-11-29T12:15:07.497",
+  "vulnStatus": "Received",
+  "descriptions": [
+    {
+      "lang": "en",
+      "value": "Use after free in libavif in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption via a crafted avif file. (Chromium security severity: High)"
+    }
+  ],
+  "metrics": {},
+  "references": [
+    {
+      "url": "https://chromereleases.googleblog.com/2023/11/stable-channel-update-for-desktop_28.html",
+      "source": "chrome-cve-admin@google.com"
+    },
+    {
+      "url": "https://crbug.com/1501770",
+      "source": "chrome-cve-admin@google.com"
+    }
+  ]
+}
--- a/CVE-2023/CVE-2023-63xx/CVE-2023-6378.json
+++ b/CVE-2023/CVE-2023-63xx/CVE-2023-6378.json
@ -0,0 +1,43 @@
+{
+  "id": "CVE-2023-6378",
+  "sourceIdentifier": "vulnerability@ncsc.ch",
+  "published": "2023-11-29T12:15:07.543",
+  "lastModified": "2023-11-29T12:15:07.543",
+  "vulnStatus": "Received",
+  "descriptions": [
+    {
+      "lang": "en",
+      "value": "A serialization vulnerability in logback receiver component part of \nlogback version 1.4.11 allows an attacker to mount a Denial-Of-Service \nattack by sending poisoned data.\n\n"
+    }
+  ],
+  "metrics": {
+    "cvssMetricV31": [
+      {
+        "source": "vulnerability@ncsc.ch",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
+          "attackVector": "LOCAL",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "NONE",
+          "userInteraction": "NONE",
+          "scope": "CHANGED",
+          "confidentialityImpact": "NONE",
+          "integrityImpact": "NONE",
+          "availabilityImpact": "HIGH",
+          "baseScore": 7.1,
+          "baseSeverity": "HIGH"
+        },
+        "exploitabilityScore": 2.5,
+        "impactScore": 4.0
+      }
+    ]
+  },
+  "references": [
+    {
+      "url": "https://logback.qos.ch/news.html#1.3.12",
+      "source": "vulnerability@ncsc.ch"
+    }
+  ]
+}
--- a/README.md
+++ b/README.md
@ -9,13 +9,13 @@ Repository synchronizes with the NVD every 2 hours.
 ### Last Repository Update

 ```plain
-2023-11-29T11:00:18.604388+00:00
+2023-11-29T13:00:18.809429+00:00
 ```

 ### Most recent CVE Modification Timestamp synchronized with NVD

 ```plain
-2023-11-29T10:15:07.707000+00:00
+2023-11-29T12:15:07.543000+00:00
 ```

 ### Last Data Feed Release
@ -29,23 +29,26 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/
 ### Total Number of included CVEs

 ```plain
-231673
+231680
 ```

 ### CVEs added in the last Commit

-Recently added CVEs: `1`
+Recently added CVEs: `7`

-* [CVE-2023-6070](CVE-2023/CVE-2023-60xx/CVE-2023-6070.json) (`2023-11-29T09:15:21.877`)
+* [CVE-2023-6345](CVE-2023/CVE-2023-63xx/CVE-2023-6345.json) (`2023-11-29T12:15:07.077`)
+* [CVE-2023-6346](CVE-2023/CVE-2023-63xx/CVE-2023-6346.json) (`2023-11-29T12:15:07.310`)
+* [CVE-2023-6347](CVE-2023/CVE-2023-63xx/CVE-2023-6347.json) (`2023-11-29T12:15:07.357`)
+* [CVE-2023-6348](CVE-2023/CVE-2023-63xx/CVE-2023-6348.json) (`2023-11-29T12:15:07.403`)
+* [CVE-2023-6350](CVE-2023/CVE-2023-63xx/CVE-2023-6350.json) (`2023-11-29T12:15:07.450`)
+* [CVE-2023-6351](CVE-2023/CVE-2023-63xx/CVE-2023-6351.json) (`2023-11-29T12:15:07.497`)
+* [CVE-2023-6378](CVE-2023/CVE-2023-63xx/CVE-2023-6378.json) (`2023-11-29T12:15:07.543`)


 ### CVEs modified in the last Commit

-Recently modified CVEs: `3`
+Recently modified CVEs: `0`

-* [CVE-2023-5598](CVE-2023/CVE-2023-55xx/CVE-2023-5598.json) (`2023-11-29T10:15:07.353`)
-* [CVE-2023-6020](CVE-2023/CVE-2023-60xx/CVE-2023-6020.json) (`2023-11-29T10:15:07.507`)
-* [CVE-2023-6021](CVE-2023/CVE-2023-60xx/CVE-2023-6021.json) (`2023-11-29T10:15:07.707`)


 ## Download and Usage