High WID-SEC-2022-2315 5 CVEs

Google Chrome / Microsoft Edge: Mehrere Schwachstellen ermöglichen Codeausführung

Published Dec 13, 2022 · Updated Nov 26, 2023 · Revision 3 · de-DE

Vendor: Debian Vendor: gentoo Vendor: Google Vendor: Microsoft Product: Chrome < 108.0.5359.124 Product: Edge < 108.0.1462.54 Product: Linux Product: Linux Platform: Linux Platform: macOS Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Chrome / Microsoft Edge ausnutzen, um beliebigen Code auszuführen.

Product

Chrome ist ein Internet-Browser von Google.
Edge ist ein Internet-Browser von Microsoft

Vulnerabilities 5

Unscored —

CVE-2022-4436

Use after free in Blink Media in Google Chrome prior to 108.0.5359.124 allowed a remote attacker to potentially exploit…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Dec 14, 2022
Unscored —

CVE-2022-4437

Use after free in Mojo IPC in Google Chrome prior to 108.0.5359.124 allowed a remote attacker to potentially exploit he…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine

Dec 14, 2022
Unscored —

CVE-2022-4438

Use after free in Blink Frames in Google Chrome prior to 108.0.5359.124 allowed a remote attacker who convinced the use…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine

Dec 14, 2022
Unscored —

CVE-2022-4439

Use after free in Aura in Google Chrome on Windows prior to 108.0.5359.124 allowed a remote attacker who convinced the …

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Dec 14, 2022
Unscored —

CVE-2022-4440

Use after free in Profiles in Google Chrome prior to 108.0.5359.124 allowed a remote attacker to potentially exploit he…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Dec 14, 2022

Revision history

2023-11-26 #3
Neue Updates von Gentoo aufgenommen
2022-12-18 #2
Neue Updates von Debian aufgenommen
2022-12-13 #1
Initiale Fassung

References

Gentoo Linux Security Advisory GLSA-202311-11 vom 2023-11-25
https://security.gentoo.org/glsa/202311-11
Chrome Releases: Stable Channel Update for Desktop vom 2022-12-13
https://chromereleases.googleblog.com/2022/12/stable-channel-update-for-desktop_13.html
Debian Security Advisory DSA-5302 vom 2022-12-16
https://lists.debian.org/debian-security-announce/2022/msg00273.html
Microsoft Edge Release Notes vom 2022-12-18
https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security