High WID-SEC-2024-1946 4 CVEs

Google Chrome: Mehrere Schwachstellen ermöglichen Codeausführung

Published Aug 28, 2024 · Updated Oct 27, 2024 · Revision 3 · de-DE

Vendor: Debian Vendor: Google Vendor: SUSE Product: Chrome Product: Linux Product: openSUSE Platform: Linux Platform: macOS Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Chrome ausnutzen, um beliebigen Programmcode auszuführen.

Product

Chrome ist ein Internet-Browser von Google.

Vulnerabilities 4

High 8.8

CVE-2024-7969

Type Confusion in V8 in Google Chrome prior to 128.0.6613.113 allowed a remote attacker to potentially exploit heap cor…

Google Chrome chromium chromium Browsers Debian Alpine Wolfi

Aug 21, 2024
High 8.8

CVE-2024-8193 Public exploit

Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.113 allowed a remote attacker who had compromised the…

Google Chrome chromium chromium Browsers Debian Ubuntu Alpine Wolfi

Aug 28, 2024
High 7.5

CVE-2024-8194

Type Confusion in V8 in Google Chrome prior to 128.0.6613.113 allowed a remote attacker to potentially exploit heap cor…

Google Chrome chromium chromium Browsers Debian Wolfi

Aug 28, 2024
High 7.5

CVE-2024-8198 Public exploit

Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.113 allowed a remote attacker who had compromised the…

Google Chrome chromium chromium Browsers Debian Ubuntu Alpine Wolfi

Aug 28, 2024

Revision history

2024-10-27 #3
Neue Updates von openSUSE aufgenommen
2024-08-29 #2
Neue Updates von Debian aufgenommen
2024-08-28 #1
Initiale Fassung

References

Google Chrome - Stable Channel Update for Desktop vom 2024-08-28
https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop_28.html
Debian Security Advisory DSA-5761 vom 2024-08-30
https://lists.debian.org/debian-security-announce/2024/msg00174.html
openSUSE Security Update OPENSUSE-SU-2024:0267-1 vom 2024-08-30
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/RIZKO6CBLHDIQSHSR5OD4LHRUHJOZWTG/
openSUSE Security Update OPENSUSE-SU-2024:0267-1 vom 2024-08-30
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RIZKO6CBLHDIQSHSR5OD4LHRUHJOZWTG/
openSUSE Security Update OPENSUSE-SU-2024:14425-1 vom 2024-10-26
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/GYIF7RESU4PKGREHH5YVHUYYGB57P4CQ/