CVE-2023-4863
Chromium: CVE-2023-4863 Heap buffer overflow in WebP
🔗 CVE IDs covered (1)
📋 Description
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. Google is aware that an exploit for CVE-2023-4863 exists in the wild.
🎯 Affected products4
- Microsoft Edge (Chromium-based)
- Microsoft Teams for Desktop
- Microsoft Teams for Mac
- WebP Image Extension
✅ Remediation
KBRelease Notes (Security Update) — fixed build 116.0.1938.81 KBRelease Notes (Security Update) — fixed build 1.0.62681.0 KBRelease Notes (Security Update) — fixed build 1.6.00.26474 KBRelease Notes (Security Update) — fixed build 1.6.00.26463
🔗 References (4)
- advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-4863
- referencehttps://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security
- patchhttps://apps.microsoft.com/store/detail/webp-image-extensions/9PG2DK419DRG?hl=en-us&gl=us
- referencehttps://learn.microsoft.com/en-us/officeupdates/teams-app-versioning