High WID-SEC-2024-2107 4 CVEs

Google Chrome und Microsoft Edge: Mehrere Schwachstellen

Published Sep 10, 2024 · Updated Aug 26, 2026 · Revision 7 · de-DE

Vendor: Debian Vendor: Fedora Vendor: gentoo Vendor: Google Vendor: IGEL Vendor: Microsoft Vendor: SUSE Product: Chrome Product: Edge Product: Linux Product: Linux Product: Linux Product: openSUSE Product: OS Platform: Linux Platform: macOS Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Chrome und Microsoft Edge ausnutzen, um beliebigen Programmcode auszuführen ausnutzen oder nicht näher beschriebene Auswirkungen zu erzielen.

Product

Chrome ist ein Internet-Browser von Google.

Vulnerabilities 4

High 8.8

CVE-2024-8636 Public exploit

Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.137 allowed a remote attacker to potentially exploit …

Google Chrome chromium chromium Browsers Debian Alpine Wolfi

Sep 11, 2024
High 8.8

CVE-2024-8637

Use after free in Media Router in Google Chrome on Android prior to 128.0.6613.137 allowed a remote attacker to potenti…

Google Chrome chromium chromium Browsers Debian Wolfi

Sep 11, 2024
High 8.8

CVE-2024-8638

Type Confusion in V8 in Google Chrome prior to 128.0.6613.137 allowed a remote attacker to potentially exploit object c…

Google Chrome chromium chromium Browsers Debian Wolfi

Sep 11, 2024
High 8.8

CVE-2024-8639

Use after free in Autofill in Google Chrome on Android prior to 128.0.6613.137 allowed a remote attacker to potentially…

Google Chrome chromium chromium Browsers Debian Wolfi

Sep 11, 2024

Revision history

2026-08-26 #7
Neue Updates von Gentoo aufgenommen
2024-10-27 #6
Neue Updates von openSUSE aufgenommen
2024-10-23 #5
Neue Updates von IGEL aufgenommen
2024-09-16 #4
Neue Updates von openSUSE aufgenommen
2024-09-12 #3
Neue Updates aufgenommen
2024-09-11 #2
Neue Updates von Fedora und Debian aufgenommen
2024-09-10 #1
Initiale Fassung

References

Google Chrome Stable Channel Update for Desktop vom 2024-09-10
https://chromereleases.googleblog.com/2024/09/stable-channel-update-for-desktop_10.html
Fedora Security Advisory FEDORA-2024-37F95CE86B vom 2024-09-12
https://bodhi.fedoraproject.org/updates/FEDORA-2024-37f95ce86b
Fedora Security Advisory FEDORA-EPEL-2024-1434B533BE vom 2024-09-12
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-1434b533be
Debian Security Advisory DSA-5768 vom 2024-09-11
https://lists.debian.org/debian-security-announce/2024/msg00181.html
Fedora Security Advisory FEDORA-2024-0A4A65F805 vom 2024-09-12
https://bodhi.fedoraproject.org/updates/FEDORA-2024-0a4a65f805
Fedora Security Advisory FEDORA-2024-9E85C72624 vom 2024-09-12
https://bodhi.fedoraproject.org/updates/FEDORA-2024-9e85c72624
Microsoft Edge Release Notes vom 2024-09-12
https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security#september-12-2024
openSUSE Security Update OPENSUSE-SU-2024:0302-1 vom 2024-09-16
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/X5R3A7VNTZ3JKV7YDW56C7TEUFBJLNKE/
IGEL Security Notice ISN-2024-20 vom 2024-10-23
https://kb.igel.com/security-safety/current/isn-2024-20-chromium-vulnerabilities
openSUSE Security Update OPENSUSE-SU-2024:14425-1 vom 2024-10-26
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/GYIF7RESU4PKGREHH5YVHUYYGB57P4CQ/
Gentoo Linux Security Advisory GLSA-202608-29 vom 2026-08-27
https://security.gentoo.org/glsa/202608-29