Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Chrome ausnutzen, um beliebigen Programmcode auszuführen, UI-Spoofing zu betreiben, Sicherheitsmechanismen zu umgehen und andere nicht spezifizierte Angriffe durchzuführen.
Product
Chrome ist ein Internet-Browser von Google.
Vulnerabilities 20
-
High 8.8
Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exp…
KEV Aug 28, 2024 -
High 8.8
Type confusion in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to exploit heap corruption via a…
KEV Aug 26, 2024 -
High 8.8
Use after free in Passwords in Google Chrome on Android prior to 128.0.6613.84 allowed a remote attacker to potentially…
-
High 8.8CVE-2024-7966 Public exploit
Out of bounds memory access in Skia in Google Chrome prior to 128.0.6613.84 allowed a remote attacker who had compromis…
-
High 8.8
Heap buffer overflow in Fonts in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit …
-
High 8.8
Use after free in Autofill in Google Chrome prior to 128.0.6613.84 allowed a remote attacker who had convinced the user…
-
High 8.8
Type Confusion in V8 in Google Chrome prior to 128.0.6613.113 allowed a remote attacker to potentially exploit heap cor…
-
High 8.8
Heap buffer overflow in PDFium in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to perform an out of b…
-
High 8.8
Insufficient data validation in V8 API in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially…
-
High 8.1
Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially per…
-
High 7.8
Insufficient data validation in Installer in Google Chrome on Windows prior to 128.0.6613.84 allowed a local attacker t…
-
High 7.3
Insufficient data validation in Installer in Google Chrome on Windows prior to 128.0.6613.84 allowed a local attacker t…
-
High 7.0
Insufficient data validation in Installer in Google Chrome on Windows prior to 128.0.6613.84 allowed a local attacker t…
-
Medium 4.3
Inappropriate implementation in Permissions in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to perfor…
-
Medium 4.3
Inappropriate implementation in FedCM in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to perform UI s…
-
Medium 4.3
Insufficient policy enforcement in Data Transfer in Google Chrome prior to 128.0.6613.84 allowed a remote attacker who …
-
Medium 4.3
Inappropriate implementation in Views in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to perform UI s…
-
Medium 4.3
Inappropriate implementation in WebApp Installs in Google Chrome on Windows prior to 128.0.6613.84 allowed an attacker …
-
Medium 4.3
Inappropriate implementation in Custom Tabs in Google Chrome on Android prior to 128.0.6613.84 allowed a remote attacke…
-
Medium 4.3
Inappropriate implementation in Extensions in Google Chrome on Windows prior to 128.0.6613.84 allowed a remote attacker…
Revision history
-
#8
Neue Updates von Gentoo aufgenommen
-
#7
Korrektur Produkteintragungen
-
#6
Neue Updates von openSUSE aufgenommen
-
#5
Neue Updates von openSUSE aufgenommen
-
#4
Neue Updates von Debian aufgenommen
-
#3
CVE-2024-7965 wird ebenfalls ausgenutzt
-
#2
Neue Updates von openSUSE und Debian aufgenommen
-
#1
Initiale Fassung
References
-
Google Chrome Stable Channel Update for Desktop vom 2024-08-21
https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop_21.html
-
openSUSE Security Update OPENSUSE-SU-2024:0258-1 vom 2024-08-23
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/QKC6ROFWBIXXM5S5SYRWQ74OU24BX5KT/
-
openSUSE Security Update OPENSUSE-SU-2024:0258-2 vom 2024-08-23
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/G5G3DFUIZH3E3T5UIPSI3LSGCI5KE3NF/
-
Debian Security Advisory DSA-5757 vom 2024-08-23
https://lists.debian.org/debian-security-announce/2024/msg00170.html
-
Debian Security Advisory DSA-5761 vom 2024-08-30
https://lists.debian.org/debian-security-announce/2024/msg00174.html
-
openSUSE Security Update OPENSUSE-SU-2024:0267-1 vom 2024-08-30
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/RIZKO6CBLHDIQSHSR5OD4LHRUHJOZWTG/
-
openSUSE Security Update OPENSUSE-SU-2024:0267-1 vom 2024-08-30
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RIZKO6CBLHDIQSHSR5OD4LHRUHJOZWTG/
-
openSUSE Security Update OPENSUSE-SU-2024:0275-1 vom 2024-09-02
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/TJMLQH7THP267EBNFZ3ECENLIIFCBW5H/
-
openSUSE Security Update OPENSUSE-SU-2024:14425-1 vom 2024-10-26
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/GYIF7RESU4PKGREHH5YVHUYYGB57P4CQ/
-
Gentoo Linux Security Advisory GLSA-202608-28 vom 2026-08-27
https://security.gentoo.org/glsa/202608-28