Debian Chromium vulnerabilities

CVE-2024-6996 [LOW] CVE-2024-6996: chromium - Race in Frames in Google Chrome prior to 127.0.6533.72 allowed a remote attacker... Race in Frames in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) Scope: local bookworm: resolved (fixed in 127.0.6533.88-1~deb12u1) bullseye: open forky: resolved (fixed in 127.0.6533.88-1) sid: resolved (fixed in

CVE-2026-3929 [LOW] CVE-2026-3929: chromium - Side-channel information leakage in ResourceTiming in Google Chrome prior to 146... Side-channel information leakage in ResourceTiming in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium) Scope: local bookworm: resolved (fixed in 146.0.7680.71-1~deb12u1) bullseye: open forky: resolved (fixed in 146.0.7680.71-1) sid: resolved (fixed in 146.0.7680.71-1)

CVE-2019-13679 [LOW] CVE-2019-13679: chromium - Insufficient policy enforcement in PDFium in Google Chrome prior to 77.0.3865.75... Insufficient policy enforcement in PDFium in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to show print dialogs via a crafted PDF file. Scope: local bookworm: resolved (fixed in 78.0.3904.87-1) bullseye: resolved (fixed in 78.0.3904.87-1) forky: resolved (fixed in 78.0.3904.87-1) sid: resolved (fixed in 78.0.3904.87-1) trixie: resolved (fixed in 78.

CVE-2022-4923 [LOW] CVE-2022-4923: chromium - Inappropriate implementation in Omnibox in Google Chrome prior to 99.0.4844.51 a... Inappropriate implementation in Omnibox in Google Chrome prior to 99.0.4844.51 allowed an attacker in a privileged network position to perform a man-in-the-middle attack via malicious network traffic. (Chromium security severity: Low) Scope: local bookworm: resolved (fixed in 99.0.4844.51-1) bullseye: resolved (fixed in 99.0.4844.51-1~deb11u1) forky: resolved (fixed i

CVE-2021-30616 [HIGH] CVE-2021-30616: chromium - Chromium: CVE-2021-30616 Use after free in Media Chromium: CVE-2021-30616 Use after free in Media Scope: local bookworm: resolved (fixed in 93.0.4577.82-1) bullseye: resolved (fixed in 93.0.4577.82-1) forky: resolved (fixed in 93.0.4577.82-1) sid: resolved (fixed in 93.0.4577.82-1) trixie: resolved (fixed in 93.0.4577.82-1)

CVE-2021-30606 [HIGH] CVE-2021-30606: chromium - Chromium: CVE-2021-30606 Use after free in Blink Chromium: CVE-2021-30606 Use after free in Blink Scope: local bookworm: resolved (fixed in 93.0.4577.82-1) bullseye: resolved (fixed in 93.0.4577.82-1) forky: resolved (fixed in 93.0.4577.82-1) sid: resolved (fixed in 93.0.4577.82-1) trixie: resolved (fixed in 93.0.4577.82-1)

CVE-2021-30611 [HIGH] CVE-2021-30611: chromium - Chromium: CVE-2021-30611 Use after free in WebRTC Chromium: CVE-2021-30611 Use after free in WebRTC Scope: local bookworm: resolved (fixed in 93.0.4577.82-1) bullseye: resolved (fixed in 93.0.4577.82-1) forky: resolved (fixed in 93.0.4577.82-1) sid: resolved (fixed in 93.0.4577.82-1) trixie: resolved (fixed in 93.0.4577.82-1)

CVE-2021-30612 [HIGH] CVE-2021-30612: chromium - Chromium: CVE-2021-30612 Use after free in WebRTC Chromium: CVE-2021-30612 Use after free in WebRTC Scope: local bookworm: resolved (fixed in 93.0.4577.82-1) bullseye: resolved (fixed in 93.0.4577.82-1) forky: resolved (fixed in 93.0.4577.82-1) sid: resolved (fixed in 93.0.4577.82-1) trixie: resolved (fixed in 93.0.4577.82-1)

CVE-2021-30617 [MEDIUM] CVE-2021-30617: chromium - Chromium: CVE-2021-30617 Policy bypass in Blink Chromium: CVE-2021-30617 Policy bypass in Blink Scope: local bookworm: resolved (fixed in 93.0.4577.82-1) bullseye: resolved (fixed in 93.0.4577.82-1) forky: resolved (fixed in 93.0.4577.82-1) sid: resolved (fixed in 93.0.4577.82-1) trixie: resolved (fixed in 93.0.4577.82-1)

CVE-2021-30621 [MEDIUM] CVE-2021-30621: chromium - Chromium: CVE-2021-30621 UI Spoofing in Autofill Chromium: CVE-2021-30621 UI Spoofing in Autofill Scope: local bookworm: resolved (fixed in 93.0.4577.82-1) bullseye: resolved (fixed in 93.0.4577.82-1) forky: resolved (fixed in 93.0.4577.82-1) sid: resolved (fixed in 93.0.4577.82-1) trixie: resolved (fixed in 93.0.4577.82-1)

CVE-2021-30619 [MEDIUM] CVE-2021-30619: chromium - Chromium: CVE-2021-30619 UI Spoofing in Autofill Chromium: CVE-2021-30619 UI Spoofing in Autofill Scope: local bookworm: resolved (fixed in 93.0.4577.82-1) bullseye: resolved (fixed in 93.0.4577.82-1) forky: resolved (fixed in 93.0.4577.82-1) sid: resolved (fixed in 93.0.4577.82-1) trixie: resolved (fixed in 93.0.4577.82-1)

CVE-2024-6992 CVE-2024-6992: chromium bookworm: resolved (fixed in 127.0.6533.88-1~deb12u1) bullseye: open forky: resolved (fixed in 127.0.6533.88-1) sid: resolved (fixed in 127.0.6533.88-1) trixie: resolved (fixed in 127.0.6533.88-1)

CVE-2024-9370 CVE-2024-9370: chromium bookworm: resolved (fixed in 129.0.6668.89-1~deb12u1) bullseye: open forky: resolved (fixed in 129.0.6668.89-1) sid: resolved (fixed in 129.0.6668.89-1) trixie: resolved (fixed in 129.0.6668.89-1)

CVE-2024-6993 CVE-2024-6993: chromium bookworm: resolved (fixed in 127.0.6533.88-1~deb12u1) bullseye: open forky: resolved (fixed in 127.0.6533.88-1) sid: resolved (fixed in 127.0.6533.88-1) trixie: resolved (fixed in 127.0.6533.88-1)