rpm package
opensuse/chromium&distro=openSUSE Tumbleweed
pkg:rpm/opensuse/chromium&distro=openSUSE%20Tumbleweed
Vulnerabilities (4,992)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2024-2885 | Hig | 8.8 | < 124.0.6367.201-1.1 | 124.0.6367.201-1.1 | Mar 26, 2024 | Use after free in Dawn in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) | |
| CVE-2024-2883 | Hig | 8.8 | < 124.0.6367.201-1.1 | 124.0.6367.201-1.1 | Mar 26, 2024 | Use after free in ANGLE in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical) | |
| CVE-2024-2628 | Med | 4.3 | < 124.0.6367.201-1.1 | 124.0.6367.201-1.1 | Mar 20, 2024 | Inappropriate implementation in Downloads in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to perform UI spoofing via a crafted URL. (Chromium security severity: Medium) | |
| CVE-2024-2627 | Hig | 8.8 | < 124.0.6367.201-1.1 | 124.0.6367.201-1.1 | Mar 20, 2024 | Use after free in Canvas in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) | |
| CVE-2024-2626 | Med | 6.5 | < 124.0.6367.201-1.1 | 124.0.6367.201-1.1 | Mar 20, 2024 | Out of bounds read in Swiftshader in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium) | |
| CVE-2024-2625 | Hig | 8.8 | < 124.0.6367.201-1.1 | 124.0.6367.201-1.1 | Mar 20, 2024 | Object lifecycle issue in V8 in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chromium security severity: High) | |
| CVE-2024-2400 | Hig | 8.8 | < 122.0.6261.128-1.1 | 122.0.6261.128-1.1 | Mar 13, 2024 | Use after free in Performance Manager in Google Chrome prior to 122.0.6261.128 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) | |
| CVE-2024-2176 | Hig | 8.8 | < 122.0.6261.111-1.1 | 122.0.6261.111-1.1 | Mar 6, 2024 | Use after free in FedCM in Google Chrome prior to 122.0.6261.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) | |
| CVE-2024-2174 | Hig | 8.8 | < 122.0.6261.111-1.1 | 122.0.6261.111-1.1 | Mar 6, 2024 | Inappropriate implementation in V8 in Google Chrome prior to 122.0.6261.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) | |
| CVE-2024-2173 | Hig | 8.8 | < 122.0.6261.111-1.1 | 122.0.6261.111-1.1 | Mar 6, 2024 | Out of bounds memory access in V8 in Google Chrome prior to 122.0.6261.111 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High) | |
| CVE-2024-1676 | Med | 5.4 | < 122.0.6261.111-1.1 | 122.0.6261.111-1.1 | Feb 21, 2024 | Inappropriate implementation in Navigation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to spoof security UI via a crafted HTML page. (Chromium security severity: Low) | |
| CVE-2024-1675 | Hig | 8.8 | < 122.0.6261.111-1.1 | 122.0.6261.111-1.1 | Feb 21, 2024 | Insufficient policy enforcement in Download in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page. (Chromium security severity: Medium) | |
| CVE-2024-1674 | Hig | 8.8 | < 122.0.6261.111-1.1 | 122.0.6261.111-1.1 | Feb 21, 2024 | Inappropriate implementation in Navigation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium) | |
| CVE-2024-1673 | Hig | 8.8 | < 122.0.6261.111-1.1 | 122.0.6261.111-1.1 | Feb 21, 2024 | Use after free in Accessibility in Google Chrome prior to 122.0.6261.57 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via specific UI gestures. (Chromium security severity: Medium) | |
| CVE-2024-1672 | Med | 5.4 | < 122.0.6261.111-1.1 | 122.0.6261.111-1.1 | Feb 21, 2024 | Inappropriate implementation in Content Security Policy in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Medium) | |
| CVE-2024-1671 | Med | 6.5 | < 122.0.6261.111-1.1 | 122.0.6261.111-1.1 | Feb 21, 2024 | Inappropriate implementation in Site Isolation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Medium) | |
| CVE-2024-1670 | Hig | 8.8 | < 122.0.6261.111-1.1 | 122.0.6261.111-1.1 | Feb 21, 2024 | Use after free in Mojo in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) | |
| CVE-2024-1669 | Hig | 8.8 | < 122.0.6261.111-1.1 | 122.0.6261.111-1.1 | Feb 21, 2024 | Out of bounds memory access in Blink in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High) | |
| CVE-2024-1284 | Cri | 9.8 | < 121.0.6167.184-1.1 | 121.0.6167.184-1.1 | Feb 7, 2024 | Use after free in Mojo in Google Chrome prior to 121.0.6167.160 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) | |
| CVE-2024-1283 | Cri | 9.8 | < 121.0.6167.184-1.1 | 121.0.6167.184-1.1 | Feb 7, 2024 | Heap buffer overflow in Skia in Google Chrome prior to 121.0.6167.160 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
- affected < 124.0.6367.201-1.1fixed 124.0.6367.201-1.1
Use after free in Dawn in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
- affected < 124.0.6367.201-1.1fixed 124.0.6367.201-1.1
Use after free in ANGLE in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)
- affected < 124.0.6367.201-1.1fixed 124.0.6367.201-1.1
Inappropriate implementation in Downloads in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to perform UI spoofing via a crafted URL. (Chromium security severity: Medium)
- affected < 124.0.6367.201-1.1fixed 124.0.6367.201-1.1
Use after free in Canvas in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
- affected < 124.0.6367.201-1.1fixed 124.0.6367.201-1.1
Out of bounds read in Swiftshader in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium)
- affected < 124.0.6367.201-1.1fixed 124.0.6367.201-1.1
Object lifecycle issue in V8 in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chromium security severity: High)
- affected < 122.0.6261.128-1.1fixed 122.0.6261.128-1.1
Use after free in Performance Manager in Google Chrome prior to 122.0.6261.128 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
- affected < 122.0.6261.111-1.1fixed 122.0.6261.111-1.1
Use after free in FedCM in Google Chrome prior to 122.0.6261.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
- affected < 122.0.6261.111-1.1fixed 122.0.6261.111-1.1
Inappropriate implementation in V8 in Google Chrome prior to 122.0.6261.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
- affected < 122.0.6261.111-1.1fixed 122.0.6261.111-1.1
Out of bounds memory access in V8 in Google Chrome prior to 122.0.6261.111 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)
- affected < 122.0.6261.111-1.1fixed 122.0.6261.111-1.1
Inappropriate implementation in Navigation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to spoof security UI via a crafted HTML page. (Chromium security severity: Low)
- affected < 122.0.6261.111-1.1fixed 122.0.6261.111-1.1
Insufficient policy enforcement in Download in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page. (Chromium security severity: Medium)
- affected < 122.0.6261.111-1.1fixed 122.0.6261.111-1.1
Inappropriate implementation in Navigation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)
- affected < 122.0.6261.111-1.1fixed 122.0.6261.111-1.1
Use after free in Accessibility in Google Chrome prior to 122.0.6261.57 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via specific UI gestures. (Chromium security severity: Medium)
- affected < 122.0.6261.111-1.1fixed 122.0.6261.111-1.1
Inappropriate implementation in Content Security Policy in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Medium)
- affected < 122.0.6261.111-1.1fixed 122.0.6261.111-1.1
Inappropriate implementation in Site Isolation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Medium)
- affected < 122.0.6261.111-1.1fixed 122.0.6261.111-1.1
Use after free in Mojo in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
- affected < 122.0.6261.111-1.1fixed 122.0.6261.111-1.1
Out of bounds memory access in Blink in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)
- affected < 121.0.6167.184-1.1fixed 121.0.6167.184-1.1
Use after free in Mojo in Google Chrome prior to 121.0.6167.160 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
- affected < 121.0.6167.184-1.1fixed 121.0.6167.184-1.1
Heap buffer overflow in Skia in Google Chrome prior to 121.0.6167.160 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Page 125 of 250