Medium WID-SEC-2024-1262 7 CVEs

Google Chrome/Microsoft Edge: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff

Published May 30, 2024 · Updated Aug 25, 2024 · Revision 5 · de-DE

Vendor: Debian Vendor: Fedora Vendor: Google Vendor: Microsoft Vendor: SUSE Product: Chrome Product: Edge Product: Linux Product: Linux Product: openSUSE Platform: Linux Platform: macOS Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Chrome/Microsoft Edge ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.

Product

Chrome ist ein Internet-Browser von Google.
Edge ist eine Internet-Browser von Microsoft.

Vulnerabilities 7

High 8.8

CVE-2024-5499

Out of bounds write in Streams API in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to execute arbitr…

Google Chrome chromium chromium Browsers Debian Alpine Wolfi

May 30, 2024
High 7.5

CVE-2024-5493

Heap buffer overflow in WebRTC in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to potentially exploi…

Google Chrome chromium chromium Browsers Debian Wolfi

May 30, 2024
High 7.5

CVE-2024-5494

Use after free in Dawn in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to potentially exploit heap c…

Google Chrome chromium chromium Browsers Debian Wolfi

May 30, 2024
High 7.5

CVE-2024-5495

Use after free in Dawn in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to potentially exploit heap c…

Google Chrome chromium chromium Browsers Debian Wolfi

May 30, 2024
High 7.5

CVE-2024-5496

Use after free in Media Session in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to execute arbitrary…

Google Chrome chromium chromium Browsers Debian Alpine Wolfi

May 30, 2024
High 7.5

CVE-2024-5497

Out of bounds memory access in Browser UI in Google Chrome prior to 125.0.6422.141 allowed a remote attacker who convin…

Google Chrome chromium chromium Browsers Debian Wolfi

May 30, 2024
Medium 5.4

CVE-2024-5498

Use after free in Presentation API in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to potentially ex…

Google Chrome chromium chromium Browsers Debian Wolfi

May 30, 2024

Revision history

2024-08-25 #5
Neue Updates von openSUSE aufgenommen
2024-07-28 #4
Neue Updates von openSUSE aufgenommen
2024-06-03 #3
Updates von Microsoft
2024-06-02 #2
Neue Updates von Fedora und Debian aufgenommen
2024-05-30 #1
Initiale Fassung

References

Google Chrome Stable Channel Update for Desktop vom 2024-05-30
https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_30.html
Fedora Security Advisory FEDORA-EPEL-2024-35FAB49640 vom 2024-06-01
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-35fab49640
Debian Security Advisory DSA-5701 vom 2024-05-31
https://lists.debian.org/debian-security-announce/2024/msg00111.html
Fedora Security Advisory FEDORA-2024-4E0EA1C22E vom 2024-05-31
https://bodhi.fedoraproject.org/updates/FEDORA-2024-4e0ea1c22e
Fedora Security Advisory FEDORA-EPEL-2024-D00A65EDA0 vom 2024-06-01
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-d00a65eda0
Fedora Security Advisory FEDORA-2024-BB52629E6C vom 2024-05-31
https://bodhi.fedoraproject.org/updates/FEDORA-2024-bb52629e6c
Release notes for Microsoft Edge Security Updates vom 2024-06-03
https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security#june-3-2024
openSUSE Security Update OPENSUSE-SU-2024:0223-1 vom 2024-07-26
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/TVYUZCKNUHHW5G5BDWQLUBT3PJ65O7JM/
openSUSE Security Update OPENSUSE-SU-2024:0155-1 vom 2024-08-23
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/HBOKUIMO47RBZX3ETJFLLOQ75WGAFHHU/