rpm package
suse/llvm17&distro=SUSE Package Hub 15 SP5
pkg:rpm/suse/llvm17&distro=SUSE%20Package%20Hub%2015%20SP5
Vulnerabilities (12)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2024-2400 | Hig | 8.8 | < 17.0.6-bp155.2.2 | 17.0.6-bp155.2.2 | Mar 13, 2024 | Use after free in Performance Manager in Google Chrome prior to 122.0.6261.128 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) | |
| CVE-2024-2176 | Hig | 8.8 | < 17.0.6-bp155.2.2 | 17.0.6-bp155.2.2 | Mar 6, 2024 | Use after free in FedCM in Google Chrome prior to 122.0.6261.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) | |
| CVE-2024-2174 | Hig | 8.8 | < 17.0.6-bp155.2.2 | 17.0.6-bp155.2.2 | Mar 6, 2024 | Inappropriate implementation in V8 in Google Chrome prior to 122.0.6261.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) | |
| CVE-2024-2173 | Hig | 8.8 | < 17.0.6-bp155.2.2 | 17.0.6-bp155.2.2 | Mar 6, 2024 | Out of bounds memory access in V8 in Google Chrome prior to 122.0.6261.111 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High) | |
| CVE-2024-1676 | Med | 5.4 | < 17.0.6-bp155.2.2 | 17.0.6-bp155.2.2 | Feb 21, 2024 | Inappropriate implementation in Navigation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to spoof security UI via a crafted HTML page. (Chromium security severity: Low) | |
| CVE-2024-1675 | Hig | 8.8 | < 17.0.6-bp155.2.2 | 17.0.6-bp155.2.2 | Feb 21, 2024 | Insufficient policy enforcement in Download in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page. (Chromium security severity: Medium) | |
| CVE-2024-1674 | Hig | 8.8 | < 17.0.6-bp155.2.2 | 17.0.6-bp155.2.2 | Feb 21, 2024 | Inappropriate implementation in Navigation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium) | |
| CVE-2024-1673 | Hig | 8.8 | < 17.0.6-bp155.2.2 | 17.0.6-bp155.2.2 | Feb 21, 2024 | Use after free in Accessibility in Google Chrome prior to 122.0.6261.57 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via specific UI gestures. (Chromium security severity: Medium) | |
| CVE-2024-1672 | Med | 5.4 | < 17.0.6-bp155.2.2 | 17.0.6-bp155.2.2 | Feb 21, 2024 | Inappropriate implementation in Content Security Policy in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Medium) | |
| CVE-2024-1671 | Med | 6.5 | < 17.0.6-bp155.2.2 | 17.0.6-bp155.2.2 | Feb 21, 2024 | Inappropriate implementation in Site Isolation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Medium) | |
| CVE-2024-1670 | Hig | 8.8 | < 17.0.6-bp155.2.2 | 17.0.6-bp155.2.2 | Feb 21, 2024 | Use after free in Mojo in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) | |
| CVE-2024-1669 | Hig | 8.8 | < 17.0.6-bp155.2.2 | 17.0.6-bp155.2.2 | Feb 21, 2024 | Out of bounds memory access in Blink in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High) |
- affected < 17.0.6-bp155.2.2fixed 17.0.6-bp155.2.2
Use after free in Performance Manager in Google Chrome prior to 122.0.6261.128 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
- affected < 17.0.6-bp155.2.2fixed 17.0.6-bp155.2.2
Use after free in FedCM in Google Chrome prior to 122.0.6261.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
- affected < 17.0.6-bp155.2.2fixed 17.0.6-bp155.2.2
Inappropriate implementation in V8 in Google Chrome prior to 122.0.6261.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
- affected < 17.0.6-bp155.2.2fixed 17.0.6-bp155.2.2
Out of bounds memory access in V8 in Google Chrome prior to 122.0.6261.111 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)
- affected < 17.0.6-bp155.2.2fixed 17.0.6-bp155.2.2
Inappropriate implementation in Navigation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to spoof security UI via a crafted HTML page. (Chromium security severity: Low)
- affected < 17.0.6-bp155.2.2fixed 17.0.6-bp155.2.2
Insufficient policy enforcement in Download in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page. (Chromium security severity: Medium)
- affected < 17.0.6-bp155.2.2fixed 17.0.6-bp155.2.2
Inappropriate implementation in Navigation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)
- affected < 17.0.6-bp155.2.2fixed 17.0.6-bp155.2.2
Use after free in Accessibility in Google Chrome prior to 122.0.6261.57 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via specific UI gestures. (Chromium security severity: Medium)
- affected < 17.0.6-bp155.2.2fixed 17.0.6-bp155.2.2
Inappropriate implementation in Content Security Policy in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Medium)
- affected < 17.0.6-bp155.2.2fixed 17.0.6-bp155.2.2
Inappropriate implementation in Site Isolation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Medium)
- affected < 17.0.6-bp155.2.2fixed 17.0.6-bp155.2.2
Use after free in Mojo in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
- affected < 17.0.6-bp155.2.2fixed 17.0.6-bp155.2.2
Out of bounds memory access in Blink in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)