CVEs have been published or revised in the Security Update Guide September 30, 2023

These common vulnerabilities and exposures (CVEs) were recently published or revised in the Microsoft Security Update Guide:

CVE-2023-4863

· Title: Chromium: CVE-2023-4863 Heap buffer overflow in WebP

· Version: 2.0

· Reason for revision: Updated CVE detail with information regarding other Microsoft products affected by this vulnerability. This is an informational change only.

· Originally released: September 12, 2023

· Last updated: September 30, 2023

· Aggregate CVE Severity Rating:

CVE-2023-5217

· Title: Chromium: CVE-2023-5217 Heap buffer overflow in vp8 encoding in libvpx

· Version: 1.1

· Reason for revision: Updated CVE detail with information regarding other Microsoft products affected by this vulnerability. This is an informational change only.

· Originally released: September 29, 2023

· Last updated: September 30, 2023

Aggregate CVE Severity Rating: