Shulou(Shulou.com)11/24 Report--

Thanks to CTOnews.com netizen Alejandro86 for the clue delivery! CTOnews.com, October 5 (Xinhua)-- Microsoft has announced that it is updating its Edge, Teams, Skype software and Webp Image Extensions extensions to fix two zero-day vulnerabilities CVE-2023-4863 and CVE-2023-5217 in Chromium.

Microsoft CTOnews.com, the source of ▲ images, learned that Google fixed the CVE-2023-4863 vulnerability in Chrome browser on September 11 and another CVE-2023-5217 vulnerability on September 27, the former is WebP's heap buffer overflow vulnerability, and the latter is a heap buffer overflow vulnerability in VP8 coding function library libvpx, both of which are said to have been exploited by hackers.

It is reported that any software that contains Chromium is affected by these two vulnerabilities, and according to Microsoft, these two vulnerabilities also affect Microsoft Teams for Desktop and Skype for Desktop, as well as the Webp Image Extensions extension provided by Microsoft through Microsoft Store.

At present, Microsoft has repaired the CVE-2023-4863 vulnerability of each software, and the CVE-2023-5217 vulnerability of Edge has also been fixed. Microsoft is currently working to fix the CVE-2023-5217 vulnerability on Teams and Skype, and the relevant updates will be provided through Microsoft Store.

Referenc

Microsoft's Response to Open-Source Vulnerabilities-CVE-2023-4863 and CVE-2023-5217

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.