rpm package
opensuse/chromium&distro=openSUSE Tumbleweed
pkg:rpm/opensuse/chromium&distro=openSUSE%20Tumbleweed
Vulnerabilities (4,053)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2024-2886 | — | < 124.0.6367.201-1.1 | 124.0.6367.201-1.1 | Mar 26, 2024 | Use after free in WebCodecs in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High) | ||
| CVE-2024-2885 | — | < 124.0.6367.201-1.1 | 124.0.6367.201-1.1 | Mar 26, 2024 | Use after free in Dawn in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) | ||
| CVE-2024-2883 | — | < 124.0.6367.201-1.1 | 124.0.6367.201-1.1 | Mar 26, 2024 | Use after free in ANGLE in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical) | ||
| CVE-2024-2628 | — | < 124.0.6367.201-1.1 | 124.0.6367.201-1.1 | Mar 20, 2024 | Inappropriate implementation in Downloads in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to perform UI spoofing via a crafted URL. (Chromium security severity: Medium) | ||
| CVE-2024-2627 | — | < 124.0.6367.201-1.1 | 124.0.6367.201-1.1 | Mar 20, 2024 | Use after free in Canvas in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) | ||
| CVE-2024-2626 | — | < 124.0.6367.201-1.1 | 124.0.6367.201-1.1 | Mar 20, 2024 | Out of bounds read in Swiftshader in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium) | ||
| CVE-2024-2625 | — | < 124.0.6367.201-1.1 | 124.0.6367.201-1.1 | Mar 20, 2024 | Object lifecycle issue in V8 in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chromium security severity: High) | ||
| CVE-2024-2400 | — | < 122.0.6261.128-1.1 | 122.0.6261.128-1.1 | Mar 13, 2024 | Use after free in Performance Manager in Google Chrome prior to 122.0.6261.128 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) | ||
| CVE-2024-2176 | — | < 122.0.6261.111-1.1 | 122.0.6261.111-1.1 | Mar 6, 2024 | Use after free in FedCM in Google Chrome prior to 122.0.6261.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) | ||
| CVE-2024-2174 | — | < 122.0.6261.111-1.1 | 122.0.6261.111-1.1 | Mar 6, 2024 | Inappropriate implementation in V8 in Google Chrome prior to 122.0.6261.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) | ||
| CVE-2024-2173 | — | < 122.0.6261.111-1.1 | 122.0.6261.111-1.1 | Mar 6, 2024 | Out of bounds memory access in V8 in Google Chrome prior to 122.0.6261.111 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High) | ||
| CVE-2024-1676 | — | < 122.0.6261.111-1.1 | 122.0.6261.111-1.1 | Feb 21, 2024 | Inappropriate implementation in Navigation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to spoof security UI via a crafted HTML page. (Chromium security severity: Low) | ||
| CVE-2024-1675 | — | < 122.0.6261.111-1.1 | 122.0.6261.111-1.1 | Feb 21, 2024 | Insufficient policy enforcement in Download in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page. (Chromium security severity: Medium) | ||
| CVE-2024-1674 | — | < 122.0.6261.111-1.1 | 122.0.6261.111-1.1 | Feb 21, 2024 | Inappropriate implementation in Navigation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium) | ||
| CVE-2024-1673 | — | < 122.0.6261.111-1.1 | 122.0.6261.111-1.1 | Feb 21, 2024 | Use after free in Accessibility in Google Chrome prior to 122.0.6261.57 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via specific UI gestures. (Chromium security severity: Medium) | ||
| CVE-2024-1672 | — | < 122.0.6261.111-1.1 | 122.0.6261.111-1.1 | Feb 21, 2024 | Inappropriate implementation in Content Security Policy in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Medium) | ||
| CVE-2024-1671 | — | < 122.0.6261.111-1.1 | 122.0.6261.111-1.1 | Feb 21, 2024 | Inappropriate implementation in Site Isolation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Medium) | ||
| CVE-2024-1670 | — | < 122.0.6261.111-1.1 | 122.0.6261.111-1.1 | Feb 21, 2024 | Use after free in Mojo in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) | ||
| CVE-2024-1669 | — | < 122.0.6261.111-1.1 | 122.0.6261.111-1.1 | Feb 21, 2024 | Out of bounds memory access in Blink in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High) | ||
| CVE-2024-1283 | — | < 121.0.6167.184-1.1 | 121.0.6167.184-1.1 | Feb 6, 2024 | Heap buffer overflow in Skia in Google Chrome prior to 121.0.6167.160 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
- CVE-2024-2886Mar 26, 2024affected < 124.0.6367.201-1.1fixed 124.0.6367.201-1.1
Use after free in WebCodecs in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High)
- CVE-2024-2885Mar 26, 2024affected < 124.0.6367.201-1.1fixed 124.0.6367.201-1.1
Use after free in Dawn in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
- CVE-2024-2883Mar 26, 2024affected < 124.0.6367.201-1.1fixed 124.0.6367.201-1.1
Use after free in ANGLE in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)
- CVE-2024-2628Mar 20, 2024affected < 124.0.6367.201-1.1fixed 124.0.6367.201-1.1
Inappropriate implementation in Downloads in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to perform UI spoofing via a crafted URL. (Chromium security severity: Medium)
- CVE-2024-2627Mar 20, 2024affected < 124.0.6367.201-1.1fixed 124.0.6367.201-1.1
Use after free in Canvas in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
- CVE-2024-2626Mar 20, 2024affected < 124.0.6367.201-1.1fixed 124.0.6367.201-1.1
Out of bounds read in Swiftshader in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium)
- CVE-2024-2625Mar 20, 2024affected < 124.0.6367.201-1.1fixed 124.0.6367.201-1.1
Object lifecycle issue in V8 in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chromium security severity: High)
- CVE-2024-2400Mar 13, 2024affected < 122.0.6261.128-1.1fixed 122.0.6261.128-1.1
Use after free in Performance Manager in Google Chrome prior to 122.0.6261.128 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
- CVE-2024-2176Mar 6, 2024affected < 122.0.6261.111-1.1fixed 122.0.6261.111-1.1
Use after free in FedCM in Google Chrome prior to 122.0.6261.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
- CVE-2024-2174Mar 6, 2024affected < 122.0.6261.111-1.1fixed 122.0.6261.111-1.1
Inappropriate implementation in V8 in Google Chrome prior to 122.0.6261.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
- CVE-2024-2173Mar 6, 2024affected < 122.0.6261.111-1.1fixed 122.0.6261.111-1.1
Out of bounds memory access in V8 in Google Chrome prior to 122.0.6261.111 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)
- CVE-2024-1676Feb 21, 2024affected < 122.0.6261.111-1.1fixed 122.0.6261.111-1.1
Inappropriate implementation in Navigation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to spoof security UI via a crafted HTML page. (Chromium security severity: Low)
- CVE-2024-1675Feb 21, 2024affected < 122.0.6261.111-1.1fixed 122.0.6261.111-1.1
Insufficient policy enforcement in Download in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page. (Chromium security severity: Medium)
- CVE-2024-1674Feb 21, 2024affected < 122.0.6261.111-1.1fixed 122.0.6261.111-1.1
Inappropriate implementation in Navigation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)
- CVE-2024-1673Feb 21, 2024affected < 122.0.6261.111-1.1fixed 122.0.6261.111-1.1
Use after free in Accessibility in Google Chrome prior to 122.0.6261.57 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via specific UI gestures. (Chromium security severity: Medium)
- CVE-2024-1672Feb 21, 2024affected < 122.0.6261.111-1.1fixed 122.0.6261.111-1.1
Inappropriate implementation in Content Security Policy in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Medium)
- CVE-2024-1671Feb 21, 2024affected < 122.0.6261.111-1.1fixed 122.0.6261.111-1.1
Inappropriate implementation in Site Isolation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Medium)
- CVE-2024-1670Feb 21, 2024affected < 122.0.6261.111-1.1fixed 122.0.6261.111-1.1
Use after free in Mojo in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
- CVE-2024-1669Feb 21, 2024affected < 122.0.6261.111-1.1fixed 122.0.6261.111-1.1
Out of bounds memory access in Blink in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)
- CVE-2024-1283Feb 6, 2024affected < 121.0.6167.184-1.1fixed 121.0.6167.184-1.1
Heap buffer overflow in Skia in Google Chrome prior to 121.0.6167.160 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Page 78 of 203