High WID-SEC-2024-0723 4 CVEs

Google Chrome: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff

Published Mar 26, 2024 · Updated Dec 8, 2024 · Revision 8 · de-DE

Vendor: Debian Vendor: Fedora Vendor: gentoo Vendor: Google Vendor: IGEL Vendor: SUSE Product: Chrome Product: Linux Product: Linux Product: Linux Product: openSUSE Product: OS Platform: Linux Platform: macOS Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Chrome ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.

Product

Chrome ist ein Internet-Browser von Google.

Vulnerabilities 4

High 8.8

CVE-2024-2885

Use after free in Dawn in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to potentially exploit heap co…

Google Chrome chromium chromium Browsers Debian Wolfi

Mar 26, 2024
High 8.1

CVE-2024-2887 Public exploit EPSS 18%

Type Confusion in WebAssembly in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to execute arbitrary co…

Google Chrome chromium chromium Browsers Debian Alpine Wolfi

Mar 26, 2024
High 7.5

CVE-2024-2883

Use after free in ANGLE in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to potentially exploit heap c…

Google Chrome chromium chromium Browsers Debian Wolfi

Mar 26, 2024
High 7.5

CVE-2024-2886

Use after free in WebCodecs in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to perform arbitrary read…

Google Chrome chromium chromium Browsers Debian Wolfi

Mar 26, 2024

Revision history

2024-12-08 #8
Neue Updates von Gentoo aufgenommen
2024-11-18 #7
Prüfung Produkteintragung
2024-05-12 #6
Neue Updates von openSUSE aufgenommen
2024-04-14 #5
Neue Updates von IGEL aufgenommen
2024-04-04 #4
Neue Updates von Fedora aufgenommen
2024-04-01 #3
Neue Updates von Debian aufgenommen
2024-03-27 #2
Exploit aufgenommen
2024-03-26 #1
Initiale Fassung

References

Stable Channel Update for Desktop vom 2024-03-26
http://chromereleases.googleblog.com/2024/03/stable-channel-update-for-desktop_26.html
Microsoft Edge Security Updates vom 2024-03-27
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-2883
Fedora Security Advisory FEDORA-2024-85531C965E vom 2024-03-28
https://bodhi.fedoraproject.org/updates/FEDORA-2024-85531c965e
Fedora Security Advisory FEDORA-2024-B4DAB205D7 vom 2024-03-27
https://bodhi.fedoraproject.org/updates/FEDORA-2024-b4dab205d7
Fedora Security Advisory FEDORA-2024-0BB0E8F2A0 vom 2024-03-27
https://bodhi.fedoraproject.org/updates/FEDORA-2024-0bb0e8f2a0
Debian Security Advisory DSA-5648 vom 2024-03-29
https://lists.debian.org/debian-security-announce/2024/msg00056.html
Fedora Security Advisory FEDORA-EPEL-2024-3CB841C5F0 vom 2024-04-05
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-3cb841c5f0
Fedora Security Advisory FEDORA-EPEL-2024-FE061342CA vom 2024-04-05
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-fe061342ca
Fedora Security Advisory FEDORA-EPEL-2024-7BC0A1D338 vom 2024-04-05
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-7bc0a1d338
IGEL Security Notice ISN-2024-10 vom 2024-04-15
https://kb.igel.com/securitysafety/en/isn-2024-10-chromium-critical-vulnerability-122882072.html
openSUSE Security Update OPENSUSE-SU-2024:0123-1 vom 2024-05-13
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2S7S4HVABEMIRHPQD4H3O6EA36PLCUCI/
openSUSE Security Update OPENSUSE-SU-2024:0123-1 vom 2024-05-13
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/2S7S4HVABEMIRHPQD4H3O6EA36PLCUCI/
openSUSE Security Update OPENSUSE-SU-2024:0122-1 vom 2024-05-13
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/FDYESS3DGR73AJ5JNOISN7IW6IOWRXSC/
Gentoo Linux Security Advisory GLSA-202412-05 vom 2024-12-07
https://security.gentoo.org/glsa/202412-05