Google Chrome und Microsoft Edge: Mehrere Schwachstellen ermöglichen Codeausführung

Summary

Product

Vulnerabilities 4

• High 8.8
  CVE-2024-0222

  Use after free in ANGLE in Google Chrome prior to 120.0.6099.199 allowed a remote attacker who had compromised the rend…

  Google Chrome chromium qt6-qtwebengine Browsers Debian Alpine
  Jan 4, 2024
• High 8.8
  CVE-2024-0223 EPSS 10%

  Heap buffer overflow in ANGLE in Google Chrome prior to 120.0.6099.199 allowed a remote attacker to potentially exploit…

  Google Chrome chromium qt6-qtwebengine Browsers Debian Alpine
  Jan 4, 2024
• High 8.8
  CVE-2024-0224

  Use after free in WebAudio in Google Chrome prior to 120.0.6099.199 allowed a remote attacker to potentially exploit he…

  Google Chrome chromium qt6-qtwebengine Browsers Debian Alpine
  Jan 4, 2024
• High 8.8
  CVE-2024-0225

  Use after free in WebGPU in Google Chrome prior to 120.0.6099.199 allowed a remote attacker to potentially exploit heap…

  Google Chrome chromium qt6-qtwebengine Browsers Debian Alpine
  Jan 4, 2024

Revision history

1. 2024-02-18 #6

   Neue Updates von Gentoo aufgenommen

2. 2024-01-31 #5

   Neue Updates von Gentoo aufgenommen

3. 2024-01-22 #4

   Neue Updates von IGEL aufgenommen

4. 2024-01-07 #3

   Neue Updates von Microsoft aufgenommen

5. 2024-01-04 #2

   Microsoft Edge auch betroffen, noch kein Patch verfügbar

6. 2024-01-03 #1

   Initiale Fassung

References

• Chrome Releases: Stable Channel Update for Desktop vom 2024-01-03
  https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop.html
• Release notes for Microsoft Edge Security Updates vom 2024-01-04
  https://docs.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security
• Debian Security Advisory DSA-5595 vom 2024-01-04
  https://lists.debian.org/debian-security-announce/2024/msg00002.html
• Fedora Security Advisory FEDORA-2024-210776B8C7 vom 2024-01-04
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-210776b8c7
• Fedora Security Advisory FEDORA-EPEL-2024-148B296F8A vom 2024-01-05
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-148b296f8a
• Fedora Security Advisory FEDORA-EPEL-2024-650D6143B5 vom 2024-01-05
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-650d6143b5
• Fedora Security Advisory FEDORA-2024-A6C2300BCA vom 2024-01-05
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-a6c2300bca
• Fedora Security Advisory FEDORA-EPEL-2024-39EC948D57 vom 2024-01-05
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-39ec948d57
• IGEL Security Notice ISN-2024-01 vom 2024-01-22
  https://kb.igel.com/securitysafety/en/isn-2024-01-chromium-vulnerabilities-112723402.html
• Gentoo Linux Security Advisory GLSA-202401-34 vom 2024-01-31
  https://security.gentoo.org/glsa/202401-34
• Gentoo Linux Security Advisory GLSA-202402-14 vom 2024-02-18
  https://security.gentoo.org/glsa/202402-14