CVE-2023-5856

Use after free in Side Panel in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

• CWE-416
• CWE-416

• https://chromereleases.googleblog.com/2023/10/stable-channel-update-for-desktop_31.htmlRelease Notes, Vendor Advisory
• https://crbug.com/1493380Permissions Required
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2MHLJRFWZNY6BFOW25Q4FEESVWZKS4C2/Mailing List
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EBA4KD5ZSV6XWWFLVR5UBYKKNOYMH33H/Mailing List
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PHWLT3M2AQDFD7RNAM3NJMYUC5KHMO5V/Mailing List
• https://security.gentoo.org/glsa/202311-11Third Party Advisory
• https://security.gentoo.org/glsa/202312-07Third Party Advisory
• https://security.gentoo.org/glsa/202401-34
• https://www.debian.org/security/2023/dsa-5546Third Party Advisory
• https://chromereleases.googleblog.com/2023/10/stable-channel-update-for-desktop_31.htmlRelease Notes, Vendor Advisory
• https://crbug.com/1493380Permissions Required
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2MHLJRFWZNY6BFOW25Q4FEESVWZKS4C2/Mailing List
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EBA4KD5ZSV6XWWFLVR5UBYKKNOYMH33H/Mailing List
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PHWLT3M2AQDFD7RNAM3NJMYUC5KHMO5V/Mailing List
• https://security.gentoo.org/glsa/202311-11Third Party Advisory
• https://security.gentoo.org/glsa/202312-07Third Party Advisory
• https://security.gentoo.org/glsa/202401-34
• https://www.debian.org/security/2023/dsa-5546Third Party Advisory

Published

Nov 1, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-5850Incorrect security UI in Downloads in Google Chrome prior to…4.3
• CVE-2023-5851Inappropriate implementation in Downloads in Google Chrome p…4.3
• CVE-2023-5852Use after free in Printing in Google Chrome prior to 119.0.6…8.8
• CVE-2023-5853Incorrect security UI in Downloads in Google Chrome prior to…4.3
• CVE-2023-5854Use after free in Profiles in Google Chrome prior to 119.0.6…8.8
• CVE-2023-5855Use after free in Reading Mode in Google Chrome prior to 119…8.8
• CVE-2023-5857Inappropriate implementation in Downloads in Google Chrome p…8.8
• CVE-2023-5858Inappropriate implementation in WebApp Provider in Google Ch…4.3
• CVE-2023-5859Incorrect security UI in Picture In Picture in Google Chrome…4.3
• CVE-2023-5860The Icons Font Loader plugin for WordPress is vulnerable to …7.2
• CVE-2023-5861Cross-site Scripting (XSS) - Stored in GitHub repository mic…4.8
• CVE-2023-5862Missing Authorization in GitHub repository hamza417/inure pr…3.3