Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Chrome / Microsoft Edge ausnutzen, um Informationen offenzulegen, einen Denial of Service zu verursachen, Code zur Ausführung zu bringen und weitere, nicht spezifizierte Auswirkungen herbeizuführen.
Product
Chrome ist ein Internet-Browser von Google.
Edge ist ein Internet-Browser von Microsoft
Vulnerabilities 13
-
High 8.8
Out of bounds memory access in V8 in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially expl…
-
High 8.8
Integer overflow in Skia in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially exploit heap …
-
High 8.8
Stack buffer overflow in Tracing in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially explo…
-
High 8.8
Insufficient data validation in Extensions in Google Chrome prior to 132.0.6834.83 allowed a remote attacker who convin…
-
High 8.8
Inappropriate implementation in Navigation in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to perform…
-
Medium 6.5
Inappropriate implementation in Navigation in Google Chrome on Android prior to 132.0.6834.83 allowed a remote attacker…
-
Medium 6.5
Out of bounds read in Metrics in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially exploit …
-
Medium 6.5
Race in Frames in Google Chrome prior to 132.0.6834.83 allowed a remote attacker who convinced a user to engage in spec…
-
Medium 6.5
Inappropriate implementation in Fullscreen in Google Chrome on Windows prior to 132.0.6834.83 allowed a remote attacker…
-
Medium 6.5
Inappropriate implementation in Fenced Frames in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to obta…
-
Medium 6.5
Inappropriate implementation in Payments in Google Chrome prior to 132.0.6834.83 allowed a remote attacker who convince…
-
Medium 4.3
Inappropriate implementation in Extensions in Google Chrome prior to 132.0.6834.83 allowed a remote attacker who convin…
-
Medium 4.3
Inappropriate implementation in Compositing in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to perfor…
Revision history
-
#6
Neue Updates von Gentoo aufgenommen
-
#5
Neue Updates von openSUSE aufgenommen
-
#4
Update von Microsoft
-
#3
Neue Updates von Fedora aufgenommen
-
#2
Neue Updates von Debian aufgenommen
-
#1
Initiale Fassung
References
-
Google Chrome Stable Channel Update for Desktop vom 2025-01-14
https://chromereleases.googleblog.com/2025/01/stable-channel-update-for-desktop_14.html
-
Debian Security Advisory DSA-5844 vom 2025-01-15
https://security-tracker.debian.org/tracker/DSA-5844-1
-
Fedora Security Advisory FEDORA-2025-D9219C6A43 vom 2025-01-16
https://bodhi.fedoraproject.org/updates/FEDORA-2025-d9219c6a43
-
Fedora Security Advisory FEDORA-2025-4C65803EA6 vom 2025-01-16
https://bodhi.fedoraproject.org/updates/FEDORA-2025-4c65803ea6
-
Fedora Security Advisory FEDORA-EPEL-2025-A5FA82B9FD vom 2025-01-16
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-a5fa82b9fd
-
Fedora Security Advisory FEDORA-EPEL-2025-1B6B7178A7 vom 2025-01-16
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-1b6b7178a7
-
Fedora Security Advisory FEDORA-EPEL-2025-97399A0469 vom 2025-01-17
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-97399a0469
-
Release notes for Microsoft Edge Security Updates vom 2025-01-19
https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security#january-17-2025
-
openSUSE Security Update OPENSUSE-SU-2025:14659-1 vom 2025-01-18
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZD2ADQJZD65W3SVFFMLWFJLHFFBUI5YK/
-
openSUSE Security Update OPENSUSE-SU-2025:0018-1 vom 2025-01-20
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MFF3YLZEHLO6D6YWHQPJAEDFFFBY7ESE/
-
Gentoo Linux Security Advisory GLSA-202507-07 vom 2025-07-09
https://security.gentoo.org/glsa/202507-07