CVE-2023-5482

Insufficient data validation in USB in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

• CWE-345
• CWE-345

• https://chromereleases.googleblog.com/2023/10/stable-channel-update-for-desktop_31.htmlRelease Notes
• https://crbug.com/1492381Permissions Required
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2MHLJRFWZNY6BFOW25Q4FEESVWZKS4C2/Mailing List
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EBA4KD5ZSV6XWWFLVR5UBYKKNOYMH33H/Mailing List
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PHWLT3M2AQDFD7RNAM3NJMYUC5KHMO5V/Mailing List
• https://security.gentoo.org/glsa/202311-11Third Party Advisory
• https://security.gentoo.org/glsa/202312-07Third Party Advisory
• https://security.gentoo.org/glsa/202401-34
• https://www.debian.org/security/2023/dsa-5546Third Party Advisory
• https://chromereleases.googleblog.com/2023/10/stable-channel-update-for-desktop_31.htmlRelease Notes
• https://crbug.com/1492381Permissions Required
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2MHLJRFWZNY6BFOW25Q4FEESVWZKS4C2/Mailing List
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EBA4KD5ZSV6XWWFLVR5UBYKKNOYMH33H/Mailing List
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PHWLT3M2AQDFD7RNAM3NJMYUC5KHMO5V/Mailing List
• https://security.gentoo.org/glsa/202311-11Third Party Advisory
• https://security.gentoo.org/glsa/202312-07Third Party Advisory
• https://security.gentoo.org/glsa/202401-34
• https://www.debian.org/security/2023/dsa-5546Third Party Advisory

Published

Nov 1, 2023

Last Modified

Jun 17, 2026

Status

Modified

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-5476Use after free in Blink History in Google Chrome prior to 11…8.8
• CVE-2023-5477Inappropriate implementation in Installer in Google Chrome p…4.3
• CVE-2023-5478Inappropriate implementation in Autofill in Google Chrome pr…4.3
• CVE-2023-5479Inappropriate implementation in Extensions API in Google Chr…6.5
• CVE-2023-5480Inappropriate implementation in Payments in Google Chrome pr…6.1
• CVE-2023-5481Inappropriate implementation in Downloads in Google Chrome p…6.5
• CVE-2023-5483Inappropriate implementation in Intents in Google Chrome pri…6.5
• CVE-2023-5484Inappropriate implementation in Navigation in Google Chrome …6.5
• CVE-2023-5485Inappropriate implementation in Autofill in Google Chrome pr…4.3
• CVE-2023-5486Inappropriate implementation in Input in Google Chrome prior…4.3
• CVE-2023-5487Inappropriate implementation in Fullscreen in Google Chrome …6.5
• CVE-2023-5488A vulnerability was found in Byzoro Smart S45F Multi-Service…8.8