Google Chrome / Microsoft Edge: Mehrere Schwachstellen ermöglichen Denial of Service

Summary

Product

Vulnerabilities 9

• High 8.8
  CVE-2025-1914

  Out of bounds read in V8 in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to perform out of bounds mem…

  Google Chrome chromium chromium Browsers Debian Wolfi
  Mar 5, 2025
• High 8.8
  CVE-2025-1916

  Use after free in Profiles in Google Chrome prior to 134.0.6998.35 allowed an attacker who convinced a user to install …

  Google Chrome chromium chromium Browsers Debian Wolfi
  Mar 5, 2025
• High 8.8
  CVE-2025-1918

  Out of bounds read in PDFium in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to potentially perform o…

  Google Chrome chromium chromium Browsers Debian Alpine Wolfi
  Mar 5, 2025
• High 8.8
  CVE-2025-1919

  Out of bounds read in Media in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to potentially perform ou…

  Google Chrome chromium chromium Browsers Debian Alpine Wolfi
  Mar 5, 2025
• High 8.1
  CVE-2025-1915

  Improper Limitation of a Pathname to a Restricted Directory in DevTools in Google Chrome on Windows prior to 134.0.6998…

  Google Chrome chromium chromium Browsers Debian Alpine Wolfi
  Mar 5, 2025
• Medium 6.5
  CVE-2025-1921

  Inappropriate implementation in Media Stream in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to obtai…

  Google Chrome chromium chromium Browsers Debian Alpine Wolfi
  Mar 5, 2025
• Medium 4.3
  CVE-2025-1917

  Inappropriate implementation in Browser UI in Google Chrome on Android prior to 134.0.6998.35 allowed a remote attacker…

  Google Chrome chromium chromium Browsers Debian Wolfi
  Mar 5, 2025
• Medium 4.3
  CVE-2025-1922

  Inappropriate implementation in Selection in Google Chrome on Android prior to 134.0.6998.35 allowed a remote attacker …

  Google Chrome chromium chromium Browsers Debian Wolfi
  Mar 5, 2025
• Medium 4.3
  CVE-2025-1923

  Inappropriate implementation in Permission Prompts in Google Chrome prior to 134.0.6998.35 allowed an attacker who conv…

  Google Chrome chromium chromium Browsers Debian Wolfi
  Mar 5, 2025

Revision history

1. 2025-03-09 #4

   Edge Update aufgenommen

2. 2025-03-06 #3

   Neue Updates von Debian aufgenommen

3. 2025-03-05 #2

   Neue Updates von Fedora aufgenommen

4. 2025-03-04 #1

   Initiale Fassung

References

• Google Stable Channel Update for Desktop vom 2025-03-04
  https://chromereleases.googleblog.com/2025/03/stable-channel-update-for-desktop.html
• Fedora Security Advisory FEDORA-EPEL-2025-21B7AF8662 vom 2025-03-06
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-21b7af8662
• Fedora Security Advisory FEDORA-EPEL-2025-2AC21D5AA2 vom 2025-03-06
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-2ac21d5aa2
• Fedora Security Advisory FEDORA-2025-762804F16E vom 2025-03-06
  https://bodhi.fedoraproject.org/updates/FEDORA-2025-762804f16e
• Fedora Security Advisory FEDORA-2025-E94782E579 vom 2025-03-06
  https://bodhi.fedoraproject.org/updates/FEDORA-2025-e94782e579
• Debian Security Advisory DSA-5875 vom 2025-03-06
  https://lists.debian.org/debian-security-announce/2025/msg00037.html
• Release notes for Microsoft Edge Security Updates vom 2025-03-09
  https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security#march-6-2025
• openSUSE Security Update OPENSUSE-SU-2025:0084-1 vom 2025-03-07
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RXNDPKOASMYM2SMWNDENDFTKUIT4CM4A/
• openSUSE Security Update OPENSUSE-SU-2025:14854-1 vom 2025-03-07
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZC4OMZ3H3IHXB4OIPEK3H45JZC4AHN72/