Vulnerability identifier: #VU79503

Vulnerability risk: Critical

CVSSv3.1:

CVE-ID: CVE-2023-4211

CWE-ID: CWE-254

Exploitation vector: Network

Exploit availability: No

Vulnerable software:
Chrome OS
Operating systems & Components / Operating system

Vendor:

Description

The vulnerability allows a remote attacker to bypass implemented security restrictions.

The vulnerability exists due to an unspecified error on ARM platforms. A remote attacker can bypass implemented security restrictions and execute arbitrary code.

Note, the vulnerability is being actively exploited in the wild.

Mitigation
Install updates from vendor's website.

Vulnerable software versions

---

External links
http://chromereleases.googleblog.com/2023/08/stable-channel-update-for-chromeos_14.html
http://source.android.com/docs/security/bulletin/pixel/2023-09-01

---

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?