High WID-SEC-2022-1432 8 CVEs

Google Chrome und Microsoft Edge: Mehrere Schwachstellen ermöglichen Codeausführung

Published Sep 14, 2022 · Updated Nov 26, 2023 · Revision 7 · de-DE

Vendor: Debian Vendor: gentoo Vendor: Google Vendor: Microsoft Product: Chrome < 105.0.5195.125 Product: Edge < 105.0.1343.42 Product: Linux Product: Linux Platform: Linux Platform: macOS Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Chrome und Microsoft Edge ausnutzen, um beliebigen Programmcode auszuführen.

Product

Chrome ist ein Internet-Browser von Google.
Edge ist ein Web Browser von Microsoft.

Vulnerabilities 8

High 8.8

CVE-2022-3195

Out of bounds write in Storage in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to perform an out of …

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Sep 26, 2022
High 8.8

CVE-2022-3196

Use after free in PDF in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to potentially exploit heap co…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine

Sep 26, 2022
High 8.8

CVE-2022-3197

Use after free in PDF in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to potentially exploit heap co…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine

Sep 26, 2022
High 8.8

CVE-2022-3198

Use after free in PDF in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to potentially exploit heap co…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine

Sep 26, 2022
High 8.8

CVE-2022-3199

Use after free in Frames in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to potentially exploit heap…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine

Sep 26, 2022
High 8.8

CVE-2022-3200

Heap buffer overflow in Internals in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to potentially exp…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine

Sep 26, 2022
High 7.5

CVE-2022-3842 EPSS 18%

Use after free in Passwords in Google Chrome prior to 105.0.5195.125 allowed a remote attacker who had compromised the …

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Jan 2, 2023
Unscored —

CVE-2022-3201

Insufficient validation of untrusted input in DevTools in Google Chrome on Chrome OS prior to 105.0.5195.125 allowed an…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine

Sep 26, 2022

Revision history

2023-11-26 #7
Neue Updates von Gentoo aufgenommen
2023-03-20 #6
CVE ergänzt
2022-09-29 #5
Neue Updates von Gentoo aufgenommen
2022-09-27 #4
Referenz(en) aufgenommen: FEDORA-2022-B49C9BC07A
2022-09-26 #3
Referenz(en) aufgenommen: FEDORA-2022-3F28AA88CF, FEDORA-2022-3CA063941B
2022-09-15 #2
Update für MS Edge
2022-09-14 #1
Initiale Fassung

References

Gentoo Linux Security Advisory GLSA-202311-11 vom 2023-11-25
https://security.gentoo.org/glsa/202311-11
Chromereleases 105.0.5195.125 vom 2022-09-14
http://chromereleases.googleblog.com/2022/09/stable-channel-update-for-desktop_14.html
Microsoft Edge Versionshinweise vom 2022-09-14
https://docs.microsoft.com/de-de/deployedge/microsoft-edge-relnotes-security
Release notes for Microsoft Edge Security Updates vom 2022-09-15
https://docs.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security#september-15-2022
Debian Security Advisory DSA-5230 vom 2022-09-15
https://lists.debian.org/debian-security-announce/2022/msg00199.html
Gentoo Linux Security Advisory GLSA-202209-23 vom 2022-09-29
https://security.gentoo.org/glsa/202209-23