High WID-SEC-2022-0744 6 CVEs

Google Chrome / Microsoft Edge: Mehrere Schwachstellen ermöglichen Codeausführung

Published Jul 19, 2022 · Updated Aug 9, 2023 · Revision 4 · de-DE

Vendor: Debian Vendor: Fedora Vendor: gentoo Vendor: Google Vendor: Microsoft Product: Chrome < 103.0.5060.134 Product: Edge < 103.0.1264.71 Product: Linux Product: Linux Product: Linux Platform: Linux Platform: macOS Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Chrome und Microsoft Edge ausnutzen, um beliebigen Programmcode auszuführen.

Product

Chrome ist ein Internet-Browser von Google.
Edge ist ein Browser von Microsoft

Vulnerabilities 6

Unscored —

CVE-2022-2163

Use after free in Cast UI and Toolbar in Google Chrome prior to 103.0.5060.134 allowed an attacker who convinced a user…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine

Jul 28, 2022
Unscored —

CVE-2022-2477

Use after free in Guest View in Google Chrome prior to 103.0.5060.134 allowed an attacker who convinced a user to insta…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine

Jul 28, 2022
Unscored —

CVE-2022-2478

Use after free in PDF in Google Chrome prior to 103.0.5060.134 allowed a remote attacker to potentially exploit heap co…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine

Jul 28, 2022
Unscored —

CVE-2022-2479

Insufficient validation of untrusted input in File in Google Chrome on Android prior to 103.0.5060.134 allowed an attac…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine

Jul 28, 2022
Unscored —

CVE-2022-2480 EPSS 19%

Use after free in Service Worker API in Google Chrome prior to 103.0.5060.134 allowed a remote attacker to potentially …

Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine

Jul 28, 2022
Unscored —

CVE-2022-2481

Use after free in Views in Google Chrome prior to 103.0.5060.134 allowed a remote attacker who convinced a user to enga…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine

Jul 28, 2022

Revision history

2023-08-09 #4
Neue Updates von Fedora aufgenommen
2022-08-22 #3
Neue Updates von Gentoo aufgenommen
2022-07-24 #2
Update für Edge hinzugefügt
2022-07-19 #1
Initiale Fassung

References

Fedora Security Advisory FEDORA-2023-6C8DE2CD15 vom 2023-08-10
https://bodhi.fedoraproject.org/updates/FEDORA-2023-6c8de2cd15
Chromereleases: 103.0.5060.134 vom 2022-07-19
http://chromereleases.googleblog.com/2022/07/stable-channel-update-for-desktop_19.html
Release notes for Microsoft Edge Security Updates vom 2022-07-24
https://docs.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security
Debian Security Advisory DSA-5187 vom 2022-07-22
https://lists.debian.org/debian-security-announce/2022/msg00156.html
Gentoo Linux Security Advisory GLSA-202208-35 vom 2022-08-23
https://security.gentoo.org/glsa/202208-35