rpm package
opensuse/llvm17&distro=openSUSE Leap 15.5
pkg:rpm/opensuse/llvm17&distro=openSUSE%20Leap%2015.5
Vulnerabilities (12)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2024-2400 | — | < 17.0.6-bp155.2.2 | 17.0.6-bp155.2.2 | Mar 13, 2024 | Use after free in Performance Manager in Google Chrome prior to 122.0.6261.128 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) | ||
| CVE-2024-2176 | — | < 17.0.6-bp155.2.2 | 17.0.6-bp155.2.2 | Mar 6, 2024 | Use after free in FedCM in Google Chrome prior to 122.0.6261.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) | ||
| CVE-2024-2174 | — | < 17.0.6-bp155.2.2 | 17.0.6-bp155.2.2 | Mar 6, 2024 | Inappropriate implementation in V8 in Google Chrome prior to 122.0.6261.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) | ||
| CVE-2024-2173 | — | < 17.0.6-bp155.2.2 | 17.0.6-bp155.2.2 | Mar 6, 2024 | Out of bounds memory access in V8 in Google Chrome prior to 122.0.6261.111 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High) | ||
| CVE-2024-1676 | — | < 17.0.6-bp155.2.2 | 17.0.6-bp155.2.2 | Feb 21, 2024 | Inappropriate implementation in Navigation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to spoof security UI via a crafted HTML page. (Chromium security severity: Low) | ||
| CVE-2024-1675 | — | < 17.0.6-bp155.2.2 | 17.0.6-bp155.2.2 | Feb 21, 2024 | Insufficient policy enforcement in Download in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page. (Chromium security severity: Medium) | ||
| CVE-2024-1674 | — | < 17.0.6-bp155.2.2 | 17.0.6-bp155.2.2 | Feb 21, 2024 | Inappropriate implementation in Navigation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium) | ||
| CVE-2024-1673 | — | < 17.0.6-bp155.2.2 | 17.0.6-bp155.2.2 | Feb 21, 2024 | Use after free in Accessibility in Google Chrome prior to 122.0.6261.57 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via specific UI gestures. (Chromium security severity: Medium) | ||
| CVE-2024-1672 | — | < 17.0.6-bp155.2.2 | 17.0.6-bp155.2.2 | Feb 21, 2024 | Inappropriate implementation in Content Security Policy in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Medium) | ||
| CVE-2024-1671 | — | < 17.0.6-bp155.2.2 | 17.0.6-bp155.2.2 | Feb 21, 2024 | Inappropriate implementation in Site Isolation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Medium) | ||
| CVE-2024-1670 | — | < 17.0.6-bp155.2.2 | 17.0.6-bp155.2.2 | Feb 21, 2024 | Use after free in Mojo in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) | ||
| CVE-2024-1669 | — | < 17.0.6-bp155.2.2 | 17.0.6-bp155.2.2 | Feb 21, 2024 | Out of bounds memory access in Blink in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High) |
- CVE-2024-2400Mar 13, 2024affected < 17.0.6-bp155.2.2fixed 17.0.6-bp155.2.2
Use after free in Performance Manager in Google Chrome prior to 122.0.6261.128 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
- CVE-2024-2176Mar 6, 2024affected < 17.0.6-bp155.2.2fixed 17.0.6-bp155.2.2
Use after free in FedCM in Google Chrome prior to 122.0.6261.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
- CVE-2024-2174Mar 6, 2024affected < 17.0.6-bp155.2.2fixed 17.0.6-bp155.2.2
Inappropriate implementation in V8 in Google Chrome prior to 122.0.6261.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
- CVE-2024-2173Mar 6, 2024affected < 17.0.6-bp155.2.2fixed 17.0.6-bp155.2.2
Out of bounds memory access in V8 in Google Chrome prior to 122.0.6261.111 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)
- CVE-2024-1676Feb 21, 2024affected < 17.0.6-bp155.2.2fixed 17.0.6-bp155.2.2
Inappropriate implementation in Navigation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to spoof security UI via a crafted HTML page. (Chromium security severity: Low)
- CVE-2024-1675Feb 21, 2024affected < 17.0.6-bp155.2.2fixed 17.0.6-bp155.2.2
Insufficient policy enforcement in Download in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page. (Chromium security severity: Medium)
- CVE-2024-1674Feb 21, 2024affected < 17.0.6-bp155.2.2fixed 17.0.6-bp155.2.2
Inappropriate implementation in Navigation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)
- CVE-2024-1673Feb 21, 2024affected < 17.0.6-bp155.2.2fixed 17.0.6-bp155.2.2
Use after free in Accessibility in Google Chrome prior to 122.0.6261.57 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via specific UI gestures. (Chromium security severity: Medium)
- CVE-2024-1672Feb 21, 2024affected < 17.0.6-bp155.2.2fixed 17.0.6-bp155.2.2
Inappropriate implementation in Content Security Policy in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Medium)
- CVE-2024-1671Feb 21, 2024affected < 17.0.6-bp155.2.2fixed 17.0.6-bp155.2.2
Inappropriate implementation in Site Isolation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Medium)
- CVE-2024-1670Feb 21, 2024affected < 17.0.6-bp155.2.2fixed 17.0.6-bp155.2.2
Use after free in Mojo in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
- CVE-2024-1669Feb 21, 2024affected < 17.0.6-bp155.2.2fixed 17.0.6-bp155.2.2
Out of bounds memory access in Blink in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)