High WID-SEC-2024-3727 4 CVEs

Google Chrome und Microsoft Edge: Mehrere Schwachstellen ermöglichen Codeausführung

Published Dec 18, 2024 · Updated Jul 8, 2025 · Revision 5 · de-DE

Vendor: Debian Vendor: Fedora Vendor: gentoo Vendor: Google Vendor: Microsoft Vendor: SUSE Product: Chrome Product: Edge Product: Linux Product: Linux Product: Linux Product: openSUSE Platform: Linux Platform: macOS Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Chrome und Microsoft Edge ausnutzen, um beliebigen Programmcode auszuführen.

Product

Chrome ist ein Internet-Browser von Google.
Edge ist ein Web Browser von Microsoft.

Vulnerabilities 4

High 8.8

CVE-2024-12692

Type Confusion in V8 in Google Chrome prior to 131.0.6778.204 allowed a remote attacker to potentially exploit heap cor…

Google Chrome chromium chromium Browsers Debian Wolfi

Dec 18, 2024
High 8.8

CVE-2024-12694

Use after free in Compositing in Google Chrome prior to 131.0.6778.204 allowed a remote attacker to potentially exploit…

Google Chrome chromium chromium Browsers Debian Alpine Wolfi

Dec 18, 2024
High 8.8

CVE-2024-12695

Out of bounds write in V8 in Google Chrome prior to 131.0.6778.204 allowed a remote attacker to execute arbitrary code …

Google Chrome chromium chromium Browsers Debian Wolfi

Dec 18, 2024
High 8.0

CVE-2024-12693

Out of bounds memory access in V8 in Google Chrome prior to 131.0.6778.204 allowed a remote attacker to execute arbitra…

Google Chrome chromium chromium Browsers Debian Alpine Wolfi

Dec 18, 2024

Revision history

2025-07-08 #5
Neue Updates von Gentoo aufgenommen
2024-12-29 #4
Neue Updates von openSUSE aufgenommen
2024-12-22 #3
Neue Updates von openSUSE aufgenommen
2024-12-19 #2
Updates von Microsoft, Fedora und Debian aufgenommen
2024-12-18 #1
Initiale Fassung

References

Google Chrome Stable Channel Update for Desktop vom 2024-12-18
https://chromereleases.googleblog.com/2024/12/stable-channel-update-for-desktop_18.html
Microsoft Edge Release Notes vom 2024-12-19
https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security#december-19-2024
Fedora Security Advisory FEDORA-2024-21C7531146 vom 2024-12-20
https://bodhi.fedoraproject.org/updates/FEDORA-2024-21c7531146
Fedora Security Advisory FEDORA-2024-4808DCE926 vom 2024-12-20
https://bodhi.fedoraproject.org/updates/FEDORA-2024-4808dce926
Fedora Security Advisory FEDORA-EPEL-2024-74EA1D7890 vom 2024-12-20
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-74ea1d7890
Fedora Security Advisory FEDORA-EPEL-2024-B98ED0B39C vom 2024-12-20
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-b98ed0b39c
Fedora Security Advisory FEDORA-EPEL-2024-C27D1A40BC vom 2024-12-20
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-c27d1a40bc
Debian Security Advisory DSA-5834 vom 2024-12-20
https://lists.debian.org/debian-security-announce/2024/msg00250.html
openSUSE Security Update OPENSUSE-SU-2024:14607-1 vom 2024-12-22
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/KQHFQRAXG35TGFRBIZUAGSZOZXBSCKIV/
openSUSE Security Update OPENSUSE-SU-2024:0417-1 vom 2024-12-28
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/HF65BDGUTXUXBR6H52BX5MEINMUTBW3M/
Gentoo Linux Security Advisory GLSA-202507-07 vom 2025-07-09
https://security.gentoo.org/glsa/202507-07