High WID-SEC-2024-0765 3 CVEs

Google Chrome und Microsoft Edge: Mehrere Schwachstellen

Published Apr 2, 2024 · Updated Dec 8, 2024 · Revision 5 · de-DE

Vendor: Debian Vendor: Fedora Vendor: gentoo Vendor: Google Vendor: Microsoft Vendor: SUSE Product: Chrome Product: Edge Product: Linux Product: Linux Product: Linux Product: openSUSE Platform: Linux Platform: macOS Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Chrome und Microsoft Edge ausnutzen, um potenziell Code auszuführen und um einen nicht näher spezifizierten Angriff durchzuführen.

Product

Chrome ist ein Internet-Browser von Google.

Vulnerabilities 3

High 8.8

CVE-2024-3156 EPSS 13%

Inappropriate implementation in V8 in Google Chrome prior to 123.0.6312.105 allowed a remote attacker to potentially pe…

Google Chrome chromium chromium Browsers Debian Wolfi

Apr 6, 2024
High 8.8

CVE-2024-3158

Use after free in Bookmarks in Google Chrome prior to 123.0.6312.105 allowed a remote attacker to potentially exploit h…

Google Chrome chromium chromium Browsers Debian Wolfi

Apr 6, 2024
High 8.8

CVE-2024-3159

Out of bounds memory access in V8 in Google Chrome prior to 123.0.6312.105 allowed a remote attacker to perform arbitra…

Google Chrome chromium chromium Browsers Debian Alpine Wolfi

Apr 6, 2024

Revision history

2024-12-08 #5
Neue Updates von Gentoo aufgenommen
2024-05-12 #4
Neue Updates von openSUSE aufgenommen
2024-04-04 #3
Neue Updates von Fedora aufgenommen
2024-04-03 #2
Microsoft Edge ebenfalls betroffen, noch kein Patch verfügbar
2024-04-02 #1
Initiale Fassung

References

Stable Channel Update for Desktop vom 2024-04-02
https://chromereleases.googleblog.com/2024/04/stable-channel-update-for-desktop.html
Release notes for Microsoft Edge Security Updates vom 2024-04-03
https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security#april-3-2024
Fedora Security Advisory FEDORA-2024-5E32CE95A3 vom 2024-04-03
https://bodhi.fedoraproject.org/updates/FEDORA-2024-5e32ce95a3
Fedora Security Advisory FEDORA-2024-39B249A59C vom 2024-04-03
https://bodhi.fedoraproject.org/updates/FEDORA-2024-39b249a59c
Debian Security Advisory DSA-5654 vom 2024-04-03
https://lists.debian.org/debian-security-announce/2024/msg00062.html
Fedora Security Advisory FEDORA-2024-F92626814D vom 2024-04-04
https://bodhi.fedoraproject.org/updates/FEDORA-2024-f92626814d
Fedora Security Advisory FEDORA-EPEL-2024-7BC0A1D338 vom 2024-04-05
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-7bc0a1d338
Fedora Security Advisory FEDORA-EPEL-2024-FE061342CA vom 2024-04-05
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-fe061342ca
Release notes for Microsoft Edge Security Updates vom 2024-04-04
https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security#april-4-2024
Fedora Security Advisory FEDORA-EPEL-2024-3CB841C5F0 vom 2024-04-05
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-3cb841c5f0
openSUSE Security Update OPENSUSE-SU-2024:0123-1 vom 2024-05-13
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2S7S4HVABEMIRHPQD4H3O6EA36PLCUCI/
openSUSE Security Update OPENSUSE-SU-2024:0123-1 vom 2024-05-13
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/2S7S4HVABEMIRHPQD4H3O6EA36PLCUCI/
Gentoo Linux Security Advisory GLSA-202412-05 vom 2024-12-07
https://security.gentoo.org/glsa/202412-05