High WID-SEC-2024-0433 8 CVEs

Google Chrome: Mehrere Schwachstellen

Published Feb 20, 2024 · Updated Dec 8, 2024 · Revision 7 · de-DE

Vendor: Debian Vendor: Fedora Vendor: gentoo Vendor: Google Vendor: IGEL Product: Chrome Product: Linux Product: Linux Product: Linux Product: OS Platform: Linux Platform: macOS Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Chrome ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen oder Sicherheitsvorkehrungen zu umgehen.

Product

Chrome ist ein Internet-Browser von Google.

Vulnerabilities 8

Critical 9.8

CVE-2024-1676 EPSS 18%

Inappropriate implementation in Navigation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to spoof s…

Google Chrome chromium chromium Browsers Debian Alpine Wolfi

Feb 21, 2024
High 8.8

CVE-2024-1670

Use after free in Mojo in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to potentially exploit heap co…

Google Chrome chromium chromium Browsers Debian Alpine Wolfi

Feb 21, 2024
High 8.8

CVE-2024-1672

Inappropriate implementation in Content Security Policy in Google Chrome prior to 122.0.6261.57 allowed a remote attack…

Google Chrome chromium chromium Browsers Debian Alpine Wolfi

Feb 21, 2024
High 8.8

CVE-2024-1673

Use after free in Accessibility in Google Chrome prior to 122.0.6261.57 allowed a remote attacker who had compromised t…

Google Chrome chromium chromium Browsers Debian Wolfi

Feb 21, 2024
High 8.8

CVE-2024-1675 EPSS 11%

Insufficient policy enforcement in Download in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass…

Google Chrome chromium chromium Browsers Debian Wolfi

Feb 21, 2024
Medium 6.5

CVE-2024-1669

Out of bounds memory access in Blink in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to perform out o…

Google Chrome chromium chromium Browsers Debian Wolfi

Feb 21, 2024
Medium 6.5

CVE-2024-1671

Inappropriate implementation in Site Isolation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to byp…

Google Chrome chromium chromium Browsers Debian Alpine Wolfi

Feb 21, 2024
Medium 6.3

CVE-2024-1674

Inappropriate implementation in Navigation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass …

Google Chrome chromium chromium Browsers Debian Wolfi

Feb 21, 2024

Revision history

2024-12-08 #7
Neue Updates von Gentoo aufgenommen
2024-03-25 #6
Neue Updates von IGEL aufgenommen
2024-02-29 #5
Neue Updates von Fedora aufgenommen
2024-02-25 #4
Neue Updates von Fedora aufgenommen
2024-02-22 #3
Neue Updates von Fedora aufgenommen
2024-02-21 #2
Neue Updates von Fedora aufgenommen
2024-02-20 #1
Initiale Fassung

References

Google Chrome vom 2024-02-20
http://chromereleases.googleblog.com/2024/02/stable-channel-update-for-desktop_20.html
Fedora Security Advisory FEDORA-2024-4ADF990562 vom 2024-02-21
https://bodhi.fedoraproject.org/updates/FEDORA-2024-4adf990562
Fedora Security Advisory FEDORA-2024-6A879CFA63 vom 2024-02-22
https://bodhi.fedoraproject.org/updates/FEDORA-2024-6a879cfa63
Debian Security Advisory DSA-5629 vom 2024-02-23
https://lists.debian.org/debian-security-announce/2024/msg00036.html
Fedora Security Advisory FEDORA-EPEL-2024-C6BF47A782 vom 2024-02-26
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-c6bf47a782
Fedora Security Advisory FEDORA-EPEL-2024-EADADC9B14 vom 2024-02-26
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-eadadc9b14
Fedora Security Advisory FEDORA-EPEL-2024-5EF433F7ED vom 2024-02-26
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-5ef433f7ed
Fedora Security Advisory FEDORA-EPEL-2024-99E002F742 vom 2024-03-01
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-99e002f742
Fedora Security Advisory FEDORA-EPEL-2024-DC7C97EE12 vom 2024-03-01
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-dc7c97ee12
IGEL Security Notice ISN-2024-07 vom 2024-03-25
https://kb.igel.com/securitysafety/en/isn-2024-07-chromium-vulnerabilities-119870009.html
Gentoo Linux Security Advisory GLSA-202412-05 vom 2024-12-07
https://security.gentoo.org/glsa/202412-05