Chromium: CVE-2023-2136 Integer overflow in Skia

Chromium: CVE-2023-2135 Use after free in DevTools

Chromium: CVE-2023-2134 Out of bounds memory access in Service Worker API

Chromium: CVE-2023-2133 Out of bounds memory access in Service Worker API

An out-of-bounds memory access flaw was found in the Linux kernel’s XFS file system in how a user restores an XFS image after failure (with a dirty log journal). This flaw allows a local user to crash or potentially escalate their privileges on the system.

In __efi_rt_asm_wrapper of efi-rt-wrapper.S there is a possible bypass of shadow stack protection due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-260821414References: Upstream kernel

In inflate of inflate.c there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12L Android-13Android ID: A-242544249

AMD: CVE-2023-20588 AMD Speculative Leaks Security Notice

AMD: CVE-2023-20585 IOMMU Write Buffer Vulnerability

AMD: CVE-2023-20569 Return Address Predictor

Chromium: CVE-2023-2033 Type Confusion in V8

The specific flaw exists within the DPT I2O Controller driver. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this in conjunction with other vulnerabilities to escalate privileges and execute arbitrary code in the context of the kernel.

A vulnerability was found in the HCI sockets implementation due to a missing capability check in net/bluetooth/hci_sock.c in the Linux Kernel. This flaw allows an attacker to unauthorized execution of management commands compromising the confidentiality integrity and availability of Bluetooth communication.