Google Chrome und Microsoft Edge: Mehrere Schwachstellen ermöglichen Codeausführung

Summary

Product

Vulnerabilities 18

• High 8.8
  CVE-2022-3304

  Use after free in CSS in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to potentially exploit heap cor…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine
  Nov 1, 2022
• High 8.8
  CVE-2022-3305

  Use after free in survey in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a remote attacker to potentially e…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Nov 1, 2022
• High 8.8
  CVE-2022-3306

  Use after free in survey in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a remote attacker to potentially e…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Nov 1, 2022
• High 8.8
  CVE-2022-3307

  Use after free in media in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to potentially exploit heap c…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Nov 1, 2022
• High 7.4
  CVE-2022-3308

  Insufficient policy enforcement in developer tools in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Nov 1, 2022
• Medium 6.5
  CVE-2022-3309

  Use after free in assistant in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a remote attacker who convinced…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Nov 1, 2022
• Medium 6.5
  CVE-2022-3310

  Insufficient policy enforcement in custom tabs in Google Chrome on Android prior to 106.0.5249.62 allowed an attacker w…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Nov 1, 2022
• Medium 6.5
  CVE-2022-3313

  Incorrect security UI in full screen in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to spoof securit…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Nov 1, 2022
• Medium 6.5
  CVE-2022-3314

  Use after free in logging in Google Chrome prior to 106.0.5249.62 allowed a remote attacker who had compromised a WebUI…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Nov 1, 2022
• Medium 4.6
  CVE-2022-3312

  Insufficient validation of untrusted input in VPN in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a local a…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Nov 1, 2022
• Unscored —
  CVE-2022-3201

  Insufficient validation of untrusted input in DevTools in Google Chrome on Chrome OS prior to 105.0.5195.125 allowed an…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine
  Sep 26, 2022
• Unscored —
  CVE-2022-3311

  Use after free in import in Google Chrome prior to 106.0.5249.62 allowed a remote attacker who had compromised a WebUI …

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Nov 1, 2022
• Unscored —
  CVE-2022-3315

  Type confusion in Blink in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to potentially exploit heap c…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Nov 1, 2022
• Unscored —
  CVE-2022-3316

  Insufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 106.0.5249.62 allowed a remote at…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Nov 1, 2022
• Unscored —
  CVE-2022-3317

  Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 106.0.5249.62 allowed a remo…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Nov 1, 2022
• Unscored —
  CVE-2022-3318

  Use after free in ChromeOS Notifications in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a remote attacker …

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Nov 1, 2022
• Unscored —
  CVE-2022-3443

  Insufficient data validation in File System API in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to by…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Nov 1, 2022
• Unscored —
  CVE-2022-3444

  Insufficient data validation in File System API in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to by…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Nov 1, 2022

Revision history

1. 2023-08-09 #5

   Neue Updates von Fedora aufgenommen

2. 2022-12-11 #4

   PoC aufgenommen

3. 2022-11-01 #3

   CVE's ergänzt

4. 2022-09-28 #2

   Neue Updates von Debian aufgenommen

5. 2022-09-27 #1

   Initiale Fassung

References

• Fedora Security Advisory FEDORA-EPEL-2023-D38BBAAF16 vom 2023-08-10
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-d38bbaaf16
• Fedora Security Advisory FEDORA-EPEL-2023-369C889880 vom 2023-08-10
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-369c889880
• Fedora Security Advisory FEDORA-2023-EA7128B5CE vom 2023-08-10
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-ea7128b5ce
• Stable Channel Update for Desktop vom 2022-09-27
  https://chromereleases.googleblog.com/2022/09/stable-channel-update-for-desktop_27.html
• Versionshinweise für Microsoft Edge-Sicherheitsupdates vom 2022-09-27
  https://learn.microsoft.com/de-de/deployedge/microsoft-edge-relnotes-security
• Debian Security Advisory DSA-5244 vom 2022-09-28
  https://lists.debian.org/debian-security-announce/2022/msg00213.html
• PoC auf bugs.chromium.org vom 2022-12-11
  https://bugs.chromium.org/p/chromium/issues/detail?id=1342722
• PoC auf bugs.chromium.org vom 2022-12-11
  https://bugs.chromium.org/p/chromium/issues/detail?id=1243802
• PoC auf bugs.chromium.org vom 2022-12-11
  https://bugs.chromium.org/p/chromium/issues/detail?id=1318791
• PoC auf bugs.chromium.org vom 2022-12-11
  https://bugs.chromium.org/p/chromium/issues/detail?id=1300539
• PoC auf bugs.chromium.org vom 2022-12-11
  https://bugs.chromium.org/p/chromium/issues/detail?id=1333623
• PoC auf bugs.chromium.org vom 2022-12-11
  https://bugs.chromium.org/p/chromium/issues/detail?id=1240065
• PoC auf bugs.chromium.org vom 2022-12-11
  https://bugs.chromium.org/p/chromium/issues/detail?id=1348415