Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Chrome und Microsoft Edge ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsmaßnahmen zu umgehen und vertrauliche Informationen offenzulegen.
Product
Chrome ist ein Internet-Browser von Google.
Edge ist ein Web Browser von Microsoft.
Vulnerabilities 23
-
Unscored —CVE-2022-4174 Public exploit
Type confusion in V8 in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to potentially exploit heap corr…
-
Unscored —
Use after free in Camera Capture in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to potentially explo…
-
Unscored —
Out of bounds write in Lacros Graphics in Google Chrome on Chrome OS and Lacros prior to 108.0.5359.71 allowed a remote…
-
Unscored —
Use after free in Extensions in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to instal…
-
Unscored —CVE-2022-4178 EPSS 24%
Use after free in Mojo in Google Chrome prior to 108.0.5359.71 allowed a remote attacker who had compromised the render…
-
Unscored —
Use after free in Audio in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install a m…
-
Unscored —
Use after free in Mojo in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install a ma…
-
Unscored —
Use after free in Forms in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to potentially exploit heap c…
-
Unscored —
Inappropriate implementation in Fenced Frames in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypa…
-
Unscored —
Insufficient policy enforcement in Popup Blocker in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to b…
-
Unscored —
Insufficient policy enforcement in Autofill in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypass…
-
Unscored —
Inappropriate implementation in Navigation in Google Chrome on iOS prior to 108.0.5359.71 allowed a remote attacker to …
-
Unscored —
Insufficient validation of untrusted input in Downloads in Google Chrome prior to 108.0.5359.71 allowed an attacker who…
-
Unscored —
Insufficient policy enforcement in DevTools in Google Chrome on Windows prior to 108.0.5359.71 allowed a remote attacke…
-
Unscored —
Insufficient validation of untrusted input in CORS in Google Chrome on Android prior to 108.0.5359.71 allowed a remote …
-
Unscored —
Insufficient policy enforcement in DevTools in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a…
-
Unscored —
Insufficient data validation in Directory in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypass f…
-
Unscored —
Use after free in Sign-In in Google Chrome prior to 108.0.5359.71 allowed a remote attacker who convinced a user to eng…
-
Unscored —
Use after free in Live Caption in Google Chrome prior to 108.0.5359.71 allowed a remote attacker who convinced a user t…
-
Unscored —
Insufficient policy enforcement in File System API in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to…
-
Unscored —
Use after free in Accessibility in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to potentially exploi…
-
Unscored —
Insufficient policy enforcement in Safe Browsing in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to b…
-
Unscored —
Inappropriate implementation in DevTools in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a us…
Revision history
-
#5
Neue Updates von Fedora aufgenommen
-
#4
Neue Updates von Gentoo aufgenommen
-
#3
CVE's ergänzt
-
#2
Neue Updates von Debian aufgenommen
-
#1
Initiale Fassung
References
-
Google Chrome Stable Channel Release vom 2022-11-29
https://chromereleases.googleblog.com/2022/11/stable-channel-update-for-desktop_29.html
-
Release notes for Microsoft Edge Security Updates vom 2022-11-29
https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security
-
Debian Security Advisory DSA-5293 vom 2022-12-03
https://lists.debian.org/debian-security-announce/2022/msg00264.html
-
Gentoo Linux Security Advisory GLSA-202311-11 vom 2023-11-25
https://security.gentoo.org/glsa/202311-11
-
Fedora Security Advisory FEDORA-EPEL-2023-B300E89045 vom 2023-12-22
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-b300e89045