Google Chrome: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 12

• Critical 9.8
  CVE-2024-0808

  Integer underflow in WebUI in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit hea…

  Google Chrome chromium qt6-qtwebengine Browsers Debian Alpine
  Jan 23, 2024
• High 8.8
  CVE-2024-0806

  Use after free in Passwords in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit he…

  Google Chrome chromium Browsers Debian
  Jan 23, 2024
• High 8.8
  CVE-2024-0807

  Use after free in Web Audio in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit he…

  Google Chrome chromium qt6-qtwebengine Browsers Debian Alpine
  Jan 23, 2024
• High 8.8
  CVE-2024-0812

  Inappropriate implementation in Accessibility in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to pote…

  Google Chrome chromium Browsers Debian
  Jan 23, 2024
• High 8.8
  CVE-2024-0813

  Use after free in Reading Mode in Google Chrome prior to 121.0.6167.85 allowed an attacker who convinced a user to inst…

  Google Chrome chromium Browsers Debian
  Jan 23, 2024
• High 8.8
  CVE-2024-3172

  Insufficient data validation in DevTools in Google Chrome prior to 121.0.6167.85 allowed a remote attacker who convince…

  Google Chrome chromium Browsers Debian
  Jul 16, 2024
• High 7.5
  CVE-2024-0804

  Insufficient policy enforcement in iOS Security UI in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to…

  Google Chrome chromium Browsers Debian
  Jan 23, 2024
• Medium 6.5
  CVE-2024-0814

  Incorrect security UI in Payments in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially spoo…

  Google Chrome chromium Browsers Debian
  Jan 23, 2024
• Medium 4.3
  CVE-2024-0805

  Inappropriate implementation in Downloads in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to perform …

  Google Chrome chromium Browsers Debian
  Jan 23, 2024
• Medium 4.3
  CVE-2024-0809

  Inappropriate implementation in Autofill in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to bypass Au…

  Google Chrome chromium Browsers Debian
  Jan 23, 2024
• Medium 4.3
  CVE-2024-0810

  Insufficient policy enforcement in DevTools in Google Chrome prior to 121.0.6167.85 allowed an attacker who convinced a…

  Google Chrome chromium qt6-qtwebengine Browsers Debian Alpine
  Jan 23, 2024
• Medium 4.3
  CVE-2024-0811

  Inappropriate implementation in Extensions API in Google Chrome prior to 121.0.6167.85 allowed an attacker who convince…

  Google Chrome chromium Browsers Debian
  Jan 23, 2024

Revision history

1. 2024-07-16 #8

   CVE ergänzt

2. 2024-05-05 #7

   Neue Updates von Gentoo aufgenommen

3. 2024-03-25 #6

   Neue Updates von IGEL aufgenommen

4. 2024-02-18 #5

   Neue Updates von Gentoo aufgenommen

5. 2024-02-01 #4

   Neue Updates von Fedora aufgenommen

6. 2024-01-28 #3

   Neue Updates von Fedora aufgenommen

7. 2024-01-24 #2

   Neue Updates von Debian und Fedora aufgenommen

8. 2024-01-23 #1

   Initiale Fassung

References

• Debian Security Advisory DSA-5607 vom 2024-01-25
  https://lists.debian.org/debian-security-announce/2024/msg00014.html
• Fedora Security Advisory FEDORA-2024-E42978D12C vom 2024-01-24
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-e42978d12c
• Fedora Security Advisory FEDORA-2024-3F7345570A vom 2024-01-24
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-3f7345570a
• Fedora Security Advisory FEDORA-EPEL-2024-44533EB648 vom 2024-01-27
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-44533eb648
• Fedora Security Advisory FEDORA-EPEL-2024-93D34F40F0 vom 2024-01-27
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-93d34f40f0
• Fedora Security Advisory FEDORA-EPEL-2024-44E34A2F20 vom 2024-02-01
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-44e34a2f20
• Fedora Security Advisory FEDORA-EPEL-2024-2DD0EF9006 vom 2024-02-01
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-2dd0ef9006
• Gentoo Linux Security Advisory GLSA-202402-23 vom 2024-02-19
  https://security.gentoo.org/glsa/202402-23
• Stable Channel Update for Desktop vom 2024-01-23
  http://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop_23.html
• IGEL Security Notice ISN-2024-07 vom 2024-03-25
  https://kb.igel.com/securitysafety/en/isn-2024-07-chromium-vulnerabilities-119870009.html
• Gentoo Linux Security Advisory GLSA-202405-14 vom 2024-05-05
  https://security.gentoo.org/glsa/202405-14