Debian Chromium vulnerabilities

CVE-2021-21215 [MEDIUM] CVE-2021-21215: chromium - Inappropriate implementation in Autofill in Google Chrome prior to 90.0.4430.72 ... Inappropriate implementation in Autofill in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to spoof security UI via a crafted HTML page. Scope: local bookworm: resolved (fixed in 90.0.4430.72-1) bullseye: resolved (fixed in 90.0.4430.72-1) forky: resolved (fixed in 90.0.4430.72-1) sid: resolved (fixed in 90.0.4430.72-1) trixie: resolved (fixed in 9

CVE-2020-16025 [CRITICAL] CVE-2020-16025: chromium - Heap buffer overflow in clipboard in Google Chrome prior to 87.0.4280.66 allowed... Heap buffer overflow in clipboard in Google Chrome prior to 87.0.4280.66 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Scope: local bookworm: resolved (fixed in 87.0.4280.88-0.1) bullseye: resolved (fixed in 87.0.4280.88-0.1) forky: resolved (fixed in 87.0.4280.88-0.1) sid: re

CVE-2020-16024 [CRITICAL] CVE-2020-16024: chromium - Heap buffer overflow in UI in Google Chrome prior to 87.0.4280.66 allowed a remo... Heap buffer overflow in UI in Google Chrome prior to 87.0.4280.66 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Scope: local bookworm: resolved (fixed in 87.0.4280.88-0.1) bullseye: resolved (fixed in 87.0.4280.88-0.1) forky: resolved (fixed in 87.0.4280.88-0.1) sid: resolved

CVE-2019-13734 [HIGH] CVE-2019-13734: chromium - Out of bounds write in SQLite in Google Chrome prior to 79.0.3945.79 allowed a r... Out of bounds write in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Scope: local bookworm: resolved (fixed in 79.0.3945.79-1) bullseye: resolved (fixed in 79.0.3945.79-1) forky: resolved (fixed in 79.0.3945.79-1) sid: resolved (fixed in 79.0.3945.79-1) trixie: resolved (fixed

CVE-2020-6493 [CRITICAL] CVE-2020-6493: chromium - Use after free in WebAuthentication in Google Chrome prior to 83.0.4103.97 allow... Use after free in WebAuthentication in Google Chrome prior to 83.0.4103.97 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Scope: local bookworm: resolved (fixed in 83.0.4103.106-1) bullseye: resolved (fixed in 83.0.4103.106-1) forky: resolved (fixed in 83.0.4103.106-1) sid: resol

CVE-2022-2852 [HIGH] CVE-2022-2852: chromium - Use after free in FedCM in Google Chrome prior to 104.0.5112.101 allowed a remot... Use after free in FedCM in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Scope: local bookworm: resolved (fixed in 104.0.5112.101-1) bullseye: resolved (fixed in 104.0.5112.101-1~deb11u1) forky: resolved (fixed in 104.0.5112.101-1) sid: resolved (fixed in 104.0.5112.101-1) trixie: resol

CVE-2024-3157 [CRITICAL] CVE-2024-3157: chromium - Out of bounds memory access in Compositing in Google Chrome prior to 123.0.6312.... Out of bounds memory access in Compositing in Google Chrome prior to 123.0.6312.122 allowed a remote attacker who had compromised the GPU process to potentially perform a sandbox escape via specific UI gestures. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 123.0.6312.122-1~deb12u1) bullseye: open forky: resolved (fixed in 123.0.631

CVE-2024-9369 [CRITICAL] CVE-2024-9369: chromium - Insufficient data validation in Mojo in Google Chrome prior to 129.0.6668.89 all... Insufficient data validation in Mojo in Google Chrome prior to 129.0.6668.89 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 129.0.6668.89-1~deb12u1) bullseye: open forky: resolved (fixed in 129.0.6668.8

CVE-2020-6402 [HIGH] CVE-2020-6402: chromium - Insufficient policy enforcement in downloads in Google Chrome on OS X prior to 8... Insufficient policy enforcement in downloads in Google Chrome on OS X prior to 80.0.3987.87 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension. Scope: local bookworm: resolved (fixed in 80.0.3987.106-1) bullseye: resolved (fixed in 80.0.3987.106-1) forky: resolved (fixed in 80.0.3987.106-

CVE-2022-3199 [HIGH] CVE-2022-3199: chromium - Use after free in Frames in Google Chrome prior to 105.0.5195.125 allowed a remo... Use after free in Frames in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 105.0.5195.125-1) bullseye: resolved (fixed in 105.0.5195.125-1~deb11u1) forky: resolved (fixed in 105.0.5195.125-1) sid: resolved (fixe

CVE-2024-3832 [HIGH] CVE-2024-3832: chromium - Object corruption in V8 in Google Chrome prior to 124.0.6367.60 allowed a remote... Object corruption in V8 in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 124.0.6367.60-1~deb12u1) bullseye: open forky: resolved (fixed in 124.0.6367.60-1) sid: resolved (fixed in 124.0.6367.60-1) trixie: reso

CVE-2024-2885 [HIGH] CVE-2024-2885: chromium - Use after free in Dawn in Google Chrome prior to 123.0.6312.86 allowed a remote ... Use after free in Dawn in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 123.0.6312.86-1~deb12u1) bullseye: open forky: resolved (fixed in 123.0.6312.86-1) sid: resolved (fixed in 123.0.6312.86-1) trixie: resolve

CVE-2024-6100 [HIGH] CVE-2024-6100: chromium - Type Confusion in V8 in Google Chrome prior to 126.0.6478.114 allowed a remote a... Type Confusion in V8 in Google Chrome prior to 126.0.6478.114 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 126.0.6478.114-1~deb12u1) bullseye: open forky: resolved (fixed in 126.0.6478.114-1) sid: resolved (fixed in 126.0.6478.114-1) trixie: resolved (fixed in

CVE-2024-5496 [HIGH] CVE-2024-5496: chromium - Use after free in Media Session in Google Chrome prior to 125.0.6422.141 allowed... Use after free in Media Session in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 125.0.6422.141-1~deb12u1) bullseye: open forky: resolved (fixed in 125.0.6422.141-1) sid: resolved (fixed in 125.0.6422.141-1

CVE-2024-5157 [HIGH] CVE-2024-5157: chromium - Use after free in Scheduling in Google Chrome prior to 125.0.6422.76 allowed a r... Use after free in Scheduling in Google Chrome prior to 125.0.6422.76 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 125.0.6422.76-1~deb12u1) bullseye: open forky: resolved (fixed in 125.0.6422.76-1) sid: resolved (fixed in 125.0.6422.76-1) trixi

CVE-2024-7256 [HIGH] CVE-2024-7256: chromium - Insufficient data validation in Dawn in Google Chrome on Android prior to 127.0.... Insufficient data validation in Dawn in Google Chrome on Android prior to 127.0.6533.88 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 127.0.6533.88-1~deb12u1) bullseye: open forky: resolved (fixed in 127.0.6533.88-1) sid: resolved (fixed in 127.0.6533.88-1) tri

CVE-2024-5836 [HIGH] CVE-2024-5836: chromium - Inappropriate Implementation in DevTools in Google Chrome prior to 126.0.6478.54... Inappropriate Implementation in DevTools in Google Chrome prior to 126.0.6478.54 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 126.0.6478.56-1~deb12u1) bullseye: open forky: resolved (fixed in 126.0.6478.56

CVE-2025-13224 [HIGH] CVE-2025-13224: chromium - Type Confusion in V8 in Google Chrome prior to 142.0.7444.175 allowed a remote a... Type Confusion in V8 in Google Chrome prior to 142.0.7444.175 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 142.0.7444.175-1~deb12u1) bullseye: open forky: resolved (fixed in 142.0.7444.175-1) sid: resolved (fixed in 142.0.7444.175-1) trixie: res

CVE-2025-13633 [HIGH] CVE-2025-13633: chromium - Use after free in Digital Credentials in Google Chrome prior to 143.0.7499.41 al... Use after free in Digital Credentials in Google Chrome prior to 143.0.7499.41 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 143.0.7499.40-1~deb12u1) bullseye: open forky: resolved (fixed in 143.0.7499.40-1

CVE-2026-2648 [HIGH] CVE-2026-2648: chromium - Heap buffer overflow in PDFium in Google Chrome prior to 145.0.7632.109 allowed ... Heap buffer overflow in PDFium in Google Chrome prior to 145.0.7632.109 allowed a remote attacker to perform an out of bounds memory write via a crafted PDF file. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 145.0.7632.109-1~deb12u3) bullseye: open forky: resolved (fixed in 145.0.7632.109-1) sid: resolved (fixed in 145.0.7632.109-1) tr