Medium WID-SEC-2024-1034 17 CVEs

Google Chrome: Mehrere Schwachstellen

Published Sep 21, 2021 · Updated May 6, 2024 · Revision 7 · de-DE

Vendor: Debian Vendor: gentoo Vendor: Google Vendor: IGEL Product: Chrome Product: Linux Product: Linux Product: OS Platform: macOS Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Chrome ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen und um Informationen offenzulegen.

Product

Chrome ist ein Internet-Browser von Google.

Vulnerabilities 17

Unscored —

CVE-2021-37956

Use after free in Offline use in Google Chrome on Android prior to 94.0.4606.54 allowed a remote attacker who had compr…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Oct 8, 2021
Unscored —

CVE-2021-37957

Use after free in WebGPU in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to potentially exploit heap c…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Oct 8, 2021
Unscored —

CVE-2021-37958

Inappropriate implementation in Navigation in Google Chrome on Windows prior to 94.0.4606.54 allowed a remote attacker …

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Oct 8, 2021
Unscored —

CVE-2021-37959

Use after free in Task Manager in Google Chrome prior to 94.0.4606.54 allowed an attacker who convinced a user to enage…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Oct 8, 2021
Unscored —

CVE-2021-37960 Rejected

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigat…

Nov 2, 2021
Unscored —

CVE-2021-37961

Use after free in Tab Strip in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to potentially exploit hea…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Oct 8, 2021
Unscored —

CVE-2021-37962

Use after free in Performance Manager in Google Chrome prior to 94.0.4606.54 allowed a remote attacker who had compromi…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine

Oct 8, 2021
Unscored —

CVE-2021-37963

Side-channel information leakage in DevTools in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to bypass…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Oct 8, 2021
Unscored —

CVE-2021-37964

Inappropriate implementation in ChromeOS Networking in Google Chrome on ChromeOS prior to 94.0.4606.54 allowed an attac…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Oct 8, 2021
Unscored —

CVE-2021-37965

Inappropriate implementation in Background Fetch API in Google Chrome prior to 94.0.4606.54 allowed a remote attacker t…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Oct 8, 2021
Unscored —

CVE-2021-37966

Inappropriate implementation in Compositing in Google Chrome on Android prior to 94.0.4606.54 allowed a remote attacker…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Oct 8, 2021
Unscored —

CVE-2021-37967

Inappropriate implementation in Background Fetch API in Google Chrome prior to 94.0.4606.54 allowed a remote attacker w…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine

Oct 8, 2021
Unscored —

CVE-2021-37968

Inappropriate implementation in Background Fetch API in Google Chrome prior to 94.0.4606.54 allowed a remote attacker t…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine

Oct 8, 2021
Unscored —

CVE-2021-37969

Inappropriate implementation in Google Updater in Google Chrome on Windows prior to 94.0.4606.54 allowed a remote attac…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Oct 8, 2021
Unscored —

CVE-2021-37970

Use after free in File System API in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to potentially explo…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Oct 8, 2021
Unscored —

CVE-2021-37971

Incorrect security UI in Web Browser UI in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to spoof the c…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine

Oct 8, 2021
Unscored —

CVE-2021-37972

Out of bounds read in libjpeg-turbo in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to potentially exp…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine

Oct 8, 2021

Revision history

2024-05-06 #7
Neue Updates von Gentoo aufgenommen
2022-01-30 #6
Neue Updates von Gentoo aufgenommen
2022-01-27 #5
Referenz(en) aufgenommen: FEDORA-2022-ECDF338EB1
2022-01-16 #4
Neue Updates von Debian aufgenommen
2021-11-30 #3
Neue Updates von IGEL aufgenommen
2021-09-26 #2
Referenz(en) aufgenommen: FEDORA-2021-359A715688, FEDORA-2021-486B697217
2021-09-21 #1
Initiale Fassung

References

Chrome Stable Channel Update vom 2021-09-21
https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_21.html
IGEL Security Notice ISN-2021-10 vom 2021-11-30
https://kb.igel.com/securitysafety/en/isn-2021-10-chromium-vulnerabilities-54083741.html
Debian Security Advisory DSA-5046 vom 2022-01-15
https://www.debian.org/security/2022/dsa-5046
Gentoo Linux Security Advisory GLSA-202201-02 vom 2022-01-31
https://www.cybersecurity-help.cz/vdb/SB2022013101
Gentoo Linux Security Advisory GLSA-202405-20 vom 2024-05-07
https://security.gentoo.org/glsa/202405-20