Medium WID-SEC-2024-0670 8 CVEs

Google Chrome: Mehrere Schwachstellen ermöglichen nicht spezifizierte Angriffe

Published Mar 19, 2024 · Updated Dec 8, 2024 · Revision 8 · de-DE

Vendor: Debian Vendor: Fedora Vendor: gentoo Vendor: Google Vendor: SUSE Product: Chrome Product: Linux Product: Linux Product: Linux Product: openSUSE Platform: iOS Platform: Linux Platform: macOS Platform: Windows

Summary

Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in Google Chrome ausnutzen, um einen nicht näher spezifizierten Angriff zu starten.

Product

Chrome ist ein Internet-Browser von Google.

Vulnerabilities 8

High 8.8

CVE-2024-2625 EPSS 21%

Object lifecycle issue in V8 in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to potentially exploit o…

Google Chrome chromium chromium Browsers Debian Alpine Wolfi

Mar 20, 2024
High 8.8

CVE-2024-2627

Use after free in Canvas in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to potentially exploit heap …

Google Chrome chromium chromium Browsers Debian Wolfi

Mar 20, 2024
High 8.8

CVE-2024-7022

Uninitialized Use in V8 in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to perform out of bounds memo…

Google Chrome chromium chromium Browsers Debian Wolfi

Sep 23, 2024
Medium 6.5

CVE-2024-2626

Out of bounds read in Swiftshader in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to perform out of b…

Google Chrome chromium chromium Browsers Debian Alpine Wolfi

Mar 20, 2024
Medium 6.5

CVE-2024-2630

Inappropriate implementation in iOS in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to leak cross-ori…

Google Chrome chromium chromium Browsers Debian Wolfi

Mar 20, 2024
Medium 4.3

CVE-2024-2628

Inappropriate implementation in Downloads in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to perform …

Google Chrome chromium chromium Browsers Debian Wolfi

Mar 20, 2024
Medium 4.3

CVE-2024-2629

Incorrect security UI in iOS in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to perform UI spoofing v…

Google Chrome chromium chromium Browsers Debian Wolfi

Mar 20, 2024
Medium 4.3

CVE-2024-2631

Inappropriate implementation in iOS in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to perform UI spo…

Google Chrome chromium chromium Browsers Debian Wolfi

Mar 20, 2024

Revision history

2024-12-08 #8
Neue Updates von Gentoo aufgenommen
2024-09-25 #7
Neue Updates von Fedora aufgenommen
2024-09-23 #6
CVE ergänzt
2024-05-12 #5
Neue Updates von openSUSE aufgenommen
2024-04-01 #4
Neue Updates von Debian aufgenommen
2024-03-27 #3
Neue Updates von Fedora aufgenommen
2024-03-20 #2
Neue Updates von Fedora aufgenommen
2024-03-19 #1
Initiale Fassung

References

Chrome Stable Channel Update for Desktop vom 2024-03-19
https://chromereleases.googleblog.com/2024/03/stable-channel-update-for-desktop_19.html
Fedora Security Advisory FEDORA-2024-F9EB1130C8 vom 2024-03-21
https://bodhi.fedoraproject.org/updates/FEDORA-2024-f9eb1130c8
Fedora Security Advisory FEDORA-2024-01F4C93547 vom 2024-03-21
https://bodhi.fedoraproject.org/updates/FEDORA-2024-01f4c93547
Fedora Security Advisory FEDORA-2024-EC79868E3B vom 2024-03-21
https://bodhi.fedoraproject.org/updates/FEDORA-2024-ec79868e3b
Fedora Security Advisory FEDORA-EPEL-2024-FC233C6D2E vom 2024-03-27
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-fc233c6d2e
Fedora Security Advisory FEDORA-EPEL-2024-15CDE9F00B vom 2024-03-27
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-15cde9f00b
Fedora Security Advisory FEDORA-EPEL-2024-24ACEEC24B vom 2024-03-27
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-24aceec24b
Debian Security Advisory DSA-5648 vom 2024-03-29
https://lists.debian.org/debian-security-announce/2024/msg00056.html
openSUSE Security Update OPENSUSE-SU-2024:0123-1 vom 2024-05-13
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2S7S4HVABEMIRHPQD4H3O6EA36PLCUCI/
openSUSE Security Update OPENSUSE-SU-2024:0123-1 vom 2024-05-13
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/2S7S4HVABEMIRHPQD4H3O6EA36PLCUCI/
Fedora Security Advisory FEDORA-2024-AAFF7345B8 vom 2024-09-25
https://bodhi.fedoraproject.org/updates/FEDORA-2024-aaff7345b8
Fedora Security Advisory FEDORA-EPEL-2024-5EC6A4BB83 vom 2024-09-25
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-5ec6a4bb83
Fedora Security Advisory FEDORA-2024-E60359F212 vom 2024-09-25
https://bodhi.fedoraproject.org/updates/FEDORA-2024-e60359f212
Fedora Security Advisory FEDORA-EPEL-2024-89511748AF vom 2024-09-25
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-89511748af
Gentoo Linux Security Advisory GLSA-202412-05 vom 2024-12-07
https://security.gentoo.org/glsa/202412-05