Medium WID-SEC-2024-0912 16 CVEs

Google Chrome: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff

Published Apr 16, 2024 · Updated Dec 8, 2024 · Revision 16 · de-DE

Vendor: Debian Vendor: Fedora Vendor: gentoo Vendor: Google Vendor: SUSE Product: Chrome Product: Linux Product: Linux Product: Linux Product: openSUSE Platform: Linux Platform: macOS Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Chrome ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.

Product

Chrome ist ein Internet-Browser von Google.

Vulnerabilities 16

Critical 9.8

CVE-2024-3845

Inappropriate implementation in Networks in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to bypass mi…

Google Chrome chromium chromium Browsers Debian Wolfi

Apr 17, 2024
Critical 9.8

CVE-2024-3847

Insufficient policy enforcement in WebUI in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to bypass co…

Google Chrome chromium chromium Browsers Debian Wolfi

Apr 17, 2024
High 8.8

CVE-2024-3832

Object corruption in V8 in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to potentially exploit object…

Google Chrome chromium chromium Browsers Debian Wolfi

Apr 17, 2024
High 8.8

CVE-2024-3833 EPSS 18%

Object corruption in WebAssembly in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to potentially explo…

Google Chrome chromium chromium Browsers Debian Wolfi

Apr 17, 2024
High 8.8

CVE-2024-3834

Use after free in Downloads in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to potentially exploit he…

Google Chrome chromium chromium Browsers Debian Wolfi

Apr 17, 2024
High 8.8

CVE-2024-3914

Use after free in V8 in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to potentially exploit heap corr…

Google Chrome chromium chromium Browsers Debian Alpine Wolfi

Apr 17, 2024
High 7.6

CVE-2024-3841

Insufficient data validation in Browser Switcher in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to i…

Google Chrome chromium chromium Browsers Debian Wolfi

Apr 17, 2024
Medium 6.5

CVE-2024-3839

Out of bounds read in Fonts in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to obtain potentially sen…

Google Chrome chromium chromium Browsers Debian Alpine Wolfi

Apr 17, 2024
Medium 6.5

CVE-2024-3840

Insufficient policy enforcement in Site Isolation in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to …

Google Chrome chromium chromium Browsers Debian Alpine Wolfi

Apr 17, 2024
Medium 5.9

CVE-2024-3837

Use after free in QUIC in Google Chrome prior to 124.0.6367.60 allowed a remote attacker who had compromised the render…

Google Chrome chromium chromium Browsers Debian Alpine Wolfi

Apr 17, 2024
Medium 5.4

CVE-2024-3846

Inappropriate implementation in Prompts in Google Chrome prior to 124.0.6367.60 allowed a remote attacker who convinced…

Google Chrome chromium chromium Browsers Debian Wolfi

Apr 17, 2024
Medium 4.6

CVE-2024-3843

Insufficient data validation in Downloads in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to perform …

Google Chrome chromium chromium Browsers Debian Wolfi

Apr 17, 2024
Medium 4.3

CVE-2024-3838

Inappropriate implementation in Autofill in Google Chrome prior to 124.0.6367.60 allowed an attacker who convinced a us…

Google Chrome chromium chromium Browsers Debian Wolfi

Apr 17, 2024
Medium 4.3

CVE-2024-3844

Inappropriate implementation in Extensions in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to perform…

Google Chrome chromium chromium Browsers Debian Wolfi

Apr 17, 2024
Medium 4.3

CVE-2024-7019

Inappropriate implementation in UI in Google Chrome prior to 124.0.6367.60 allowed a remote attacker who convinced a us…

Google Chrome chromium chromium Browsers Debian Wolfi

Sep 23, 2024
Medium 4.3

CVE-2024-7020

Inappropriate implementation in Autofill in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to perform U…

Google Chrome chromium chromium Browsers Debian Wolfi

Sep 23, 2024

Revision history

2024-12-08 #16
Neue Updates von Gentoo aufgenommen
2024-09-25 #15
Neue Updates von Fedora aufgenommen
2024-09-23 #14
CVE ergänzt
2024-06-10 #13
Neue Updates von openSUSE aufgenommen
2024-05-23 #12
Neue Updates von Fedora aufgenommen
2024-05-16 #11
Neue Updates von openSUSE aufgenommen
2024-05-12 #10
Neue Updates von Fedora und openSUSE aufgenommen
2024-05-09 #9
Neue Updates von Fedora aufgenommen
2024-05-01 #8
Neue Updates von Fedora aufgenommen
2024-04-29 #7
Neue Updates von Fedora aufgenommen
2024-04-24 #6
Neue Updates von Fedora aufgenommen
2024-04-22 #5
Neue Updates von Fedora aufgenommen
2024-04-21 #4
Neue Updates von Debian und Fedora aufgenommen
2024-04-18 #3
Neue Updates von Fedora aufgenommen
2024-04-17 #2
CVE ergänzt
2024-04-16 #1
Initiale Fassung

References

Google Chrome Stable Channel Update for Desktop vom 2024-04-16
http://chromereleases.googleblog.com/2024/04/stable-channel-update-for-desktop_16.html
Fedora Security Advisory FEDORA-2024-12EDB9DEC8 vom 2024-04-18
https://bodhi.fedoraproject.org/updates/FEDORA-2024-12edb9dec8
Fedora Security Advisory FEDORA-2024-5D8F4F86B0 vom 2024-04-18
https://bodhi.fedoraproject.org/updates/FEDORA-2024-5d8f4f86b0
Debian Security Advisory DSA-5668 vom 2024-04-20
https://lists.debian.org/debian-security-announce/2024/msg00077.html
Fedora Security Advisory FEDORA-EPEL-2024-2BF39E0BA4 vom 2024-04-21
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-2bf39e0ba4
Fedora Security Advisory FEDORA-2024-8B50CA2E22 vom 2024-04-23
https://bodhi.fedoraproject.org/updates/FEDORA-2024-8b50ca2e22
Fedora Security Advisory FEDORA-2024-DE34D9D61F vom 2024-04-25
https://bodhi.fedoraproject.org/updates/FEDORA-2024-de34d9d61f
Fedora Security Advisory FEDORA-2024-DECB7E94A1 vom 2024-04-25
https://bodhi.fedoraproject.org/updates/FEDORA-2024-decb7e94a1
Fedora Security Advisory FEDORA-EPEL-2024-0C24DA3136 vom 2024-04-25
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-0c24da3136
Fedora Security Advisory FEDORA-2024-2C9BE9D949 vom 2024-04-25
https://bodhi.fedoraproject.org/updates/FEDORA-2024-2c9be9d949
Fedora Security Advisory FEDORA-2024-0539D2C8B0 vom 2024-04-30
https://bodhi.fedoraproject.org/updates/FEDORA-2024-0539d2c8b0
Fedora Security Advisory FEDORA-EPEL-2024-68B6D0DAFE vom 2024-04-30
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-68b6d0dafe
Fedora Security Advisory FEDORA-2024-5CF9499B62 vom 2024-05-02
https://bodhi.fedoraproject.org/updates/FEDORA-2024-5cf9499b62
Fedora Security Advisory FEDORA-EPEL-2024-808F3961EF vom 2024-05-02
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-808f3961ef
Fedora Security Advisory FEDORA-EPEL-2024-F74FBCE604 vom 2024-05-09
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-f74fbce604
Fedora Security Advisory FEDORA-EPEL-2024-6F1C3198F5 vom 2024-05-11
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-6f1c3198f5
openSUSE Security Update OPENSUSE-SU-2024:0123-1 vom 2024-05-13
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/2S7S4HVABEMIRHPQD4H3O6EA36PLCUCI/
openSUSE Security Update OPENSUSE-SU-2024:0123-1 vom 2024-05-13
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2S7S4HVABEMIRHPQD4H3O6EA36PLCUCI/
openSUSE Security Update OPENSUSE-SU-2024:0128-1 vom 2024-05-16
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/QVLMJIQMVDQI2D33EDKB65KEXN6OMIRX/
openSUSE Security Update OPENSUSE-SU-2024:0128-1 vom 2024-05-16
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QVLMJIQMVDQI2D33EDKB65KEXN6OMIRX/
Fedora Security Advisory FEDORA-EPEL-2024-38D250BAFC vom 2024-05-17
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-38d250bafc
Fedora Security Advisory FEDORA-EPEL-2024-3184C14A07 vom 2024-05-23
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-3184c14a07
openSUSE Security Update OPENSUSE-SU-2024:0156-1 vom 2024-06-10
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/PYKI7FIDICKYHO5TLIGQUUCUF2ATFWPR/
openSUSE Security Update OPENSUSE-SU-2024:0156-1 vom 2024-06-10
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/PYKI7FIDICKYHO5TLIGQUUCUF2ATFWPR/
Fedora Security Advisory FEDORA-2024-E60359F212 vom 2024-09-25
https://bodhi.fedoraproject.org/updates/FEDORA-2024-e60359f212
Fedora Security Advisory FEDORA-2024-AAFF7345B8 vom 2024-09-25
https://bodhi.fedoraproject.org/updates/FEDORA-2024-aaff7345b8
Fedora Security Advisory FEDORA-EPEL-2024-89511748AF vom 2024-09-25
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-89511748af
Fedora Security Advisory FEDORA-EPEL-2024-5EC6A4BB83 vom 2024-09-25
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-5ec6a4bb83
Gentoo Linux Security Advisory GLSA-202412-05 vom 2024-12-07
https://security.gentoo.org/glsa/202412-05