Google Chrome / Microsoft Edge: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff

Summary

Product

Vulnerabilities 13

• High 8.8
  CVE-2024-9954

  Use after free in AI in Google Chrome prior to 130.0.6723.58 allowed a remote attacker to potentially exploit heap corr…

  Google Chrome chromium chromium Browsers Debian Wolfi
  Oct 15, 2024
• High 8.8
  CVE-2024-9955

  Use after free in WebAuthentication in Google Chrome prior to 130.0.6723.58 allowed a remote attacker to potentially ex…

  Google Chrome chromium chromium Browsers Debian Wolfi
  Oct 15, 2024
• High 8.8
  CVE-2024-9957

  Use after free in UI in Google Chrome on iOS prior to 130.0.6723.58 allowed a remote attacker who convinced a user to e…

  Google Chrome chromium chromium Browsers Debian Wolfi
  Oct 15, 2024
• High 8.8
  CVE-2024-9959

  Use after free in DevTools in Google Chrome prior to 130.0.6723.58 allowed a remote attacker who had compromised the re…

  Google Chrome chromium chromium Browsers Debian Wolfi
  Oct 15, 2024
• High 8.8
  CVE-2024-9960

  Use after free in Dawn in Google Chrome prior to 130.0.6723.58 allowed a remote attacker to potentially exploit heap co…

  Google Chrome chromium chromium Browsers Debian Wolfi
  Oct 15, 2024
• High 8.8
  CVE-2024-9961

  Use after free in ParcelTracking in Google Chrome on iOS prior to 130.0.6723.58 allowed a remote attacker who convinced…

  Google Chrome chromium chromium Browsers Debian Wolfi
  Oct 15, 2024
• High 8.8
  CVE-2024-9965

  Insufficient data validation in DevTools in Google Chrome on Windows prior to 130.0.6723.58 allowed a remote attacker w…

  Google Chrome chromium chromium Browsers Debian Alpine Wolfi
  Oct 15, 2024
• High 7.8
  CVE-2024-9956

  Inappropriate implementation in WebAuthentication in Google Chrome on Android prior to 130.0.6723.58 allowed a local at…

  Google Chrome chromium chromium Browsers Debian Wolfi
  Oct 15, 2024
• Medium 5.3
  CVE-2024-9966

  Inappropriate implementation in Navigations in Google Chrome prior to 130.0.6723.58 allowed a remote attacker to bypass…

  Google Chrome chromium chromium Browsers Debian Alpine Wolfi
  Oct 15, 2024
• Medium 4.3
  CVE-2024-9958

  Inappropriate implementation in PictureInPicture in Google Chrome prior to 130.0.6723.58 allowed a remote attacker to p…

  Google Chrome chromium chromium Browsers Debian Wolfi
  Oct 15, 2024
• Medium 4.3
  CVE-2024-9962

  Inappropriate implementation in Permissions in Google Chrome prior to 130.0.6723.58 allowed a remote attacker who convi…

  Google Chrome chromium chromium Browsers Debian Wolfi
  Oct 15, 2024
• Medium 4.3
  CVE-2024-9963

  Insufficient data validation in Downloads in Google Chrome prior to 130.0.6723.58 allowed a remote attacker who convinc…

  Google Chrome chromium chromium Browsers Debian Wolfi
  Oct 15, 2024
• Medium 4.3
  CVE-2024-9964

  Inappropriate implementation in Payments in Google Chrome prior to 130.0.6723.58 allowed a remote attacker who convince…

  Google Chrome chromium chromium Browsers Debian Wolfi
  Oct 15, 2024

Revision history

1. 2024-11-11 #5

   CPE Referenzen überprüft

2. 2024-10-27 #4

   Neue Updates von Fedora aufgenommen

3. 2024-10-20 #3

   Neue Updates von Debian, Fedora und openSUSE aufgenommen

4. 2024-10-17 #2

   Microsoft Edge hnzugefügt

5. 2024-10-15 #1

   Initiale Fassung

References

• Google Stable Channel Update for Desktop vom 2024-10-15
  https://chromereleases.googleblog.com/2024/10/stable-channel-update-for-desktop_15.html
• Release notes for Microsoft Edge Security Updates vom 2024-10-17
  https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security#october-17-2024
• Debian Security Advisory DSA-5793 vom 2024-10-20
  https://lists.debian.org/debian-security-announce/2024/msg00207.html
• Fedora Security Advisory FEDORA-EPEL-2024-01E1CEF110 vom 2024-10-18
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-01e1cef110
• Fedora Security Advisory FEDORA-EPEL-2024-DDE512D4ED vom 2024-10-18
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-dde512d4ed
• openSUSE Security Update OPENSUSE-SU-2024:14414-1 vom 2024-10-20
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/7S7TY44EWRTYI3MNUUX57QOJOOMRZ2QM/
• Fedora Security Advisory FEDORA-2024-3A6F9AB958 vom 2024-10-18
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-3a6f9ab958
• openSUSE Security Update OPENSUSE-SU-2024:0337-1 vom 2024-10-18
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/T2MFLX2ZRDN67URDWGTQ2CAJVYDFICNP/
• Fedora Security Advisory FEDORA-2024-C0B1D26DE3 vom 2024-10-18
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-c0b1d26de3
• Fedora Security Advisory FEDORA-2024-4D80983AF6 vom 2024-10-18
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-4d80983af6
• Fedora Security Advisory FEDORA-2024-6A0E07C9C7 vom 2024-10-27
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-6a0e07c9c7
• Fedora Security Advisory FEDORA-EPEL-2024-983C32D3FA vom 2024-10-27
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-983c32d3fa
• Fedora Security Advisory FEDORA-2024-1178C53BB1 vom 2024-10-27
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-1178c53bb1
• Fedora Security Advisory FEDORA-EPEL-2024-DB9E2D0206 vom 2024-10-27
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-db9e2d0206
• Fedora Security Advisory FEDORA-2024-F1117FAA03 vom 2024-10-27
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-f1117faa03