Debian Chromium vulnerabilities

CVE-2022-4262 [HIGH] CVE-2022-4262: chromium - Type confusion in V8 in Google Chrome prior to 108.0.5359.94 allowed a remote at... Type confusion in V8 in Google Chrome prior to 108.0.5359.94 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 108.0.5359.94-1) bullseye: resolved (fixed in 108.0.5359.94-1~deb11u1) forky: resolved (fixed in 108.0.5359.94-1) sid: resolved (fixed in 108

CVE-2019-5825 [MEDIUM] CVE-2019-5825: chromium - Out of bounds write in JavaScript in Google Chrome prior to 73.0.3683.86 allowed... Out of bounds write in JavaScript in Google Chrome prior to 73.0.3683.86 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Scope: local bookworm: resolved (fixed in 75.0.3770.80-1) bullseye: resolved (fixed in 75.0.3770.80-1) forky: resolved (fixed in 75.0.3770.80-1) sid: resolved (fixed in 75.0.3770.80-1) trixie: resolved (f

CVE-2026-5281 [HIGH] CVE-2026-5281: chromium - Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote... Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 146.0.7680.177-1~deb12u1) bullseye: open forky: resolved (fixed in 146.0.7680.177-1) sid: resolved (fixed in 1

CVE-2025-6558 [HIGH] CVE-2025-6558: chromium - Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome pri... Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 138.0.7204.157-1~deb12u1) bullseye: open forky: resolved (fixed in 138.0.7204.157-1) sid: resolved (

CVE-2022-1364 [HIGH] CVE-2022-1364: chromium - Type confusion in V8 Turbofan in Google Chrome prior to 100.0.4896.127 allowed a... Type confusion in V8 Turbofan in Google Chrome prior to 100.0.4896.127 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Scope: local bookworm: resolved (fixed in 100.0.4896.127-1) bullseye: resolved (fixed in 100.0.4896.127-1~deb11u1) forky: resolved (fixed in 100.0.4896.127-1) sid: resolved (fixed in 100.0.4896.127-1) trixie:

CVE-2025-5419 [HIGH] CVE-2025-5419: chromium - Out of bounds read and write in V8 in Google Chrome prior to 137.0.7151.68 allow... Out of bounds read and write in V8 in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 137.0.7151.68-1~deb12u1) bullseye: open forky: resolved (fixed in 137.0.7151.68-1) sid: resolved (fixed in 137.0.7151.68-1) tri

CVE-2024-0519 [HIGH] CVE-2024-0519: chromium - Out of bounds memory access in V8 in Google Chrome prior to 120.0.6099.224 allow... Out of bounds memory access in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 120.0.6099.224-1~deb12u1) bullseye: resolved (fixed in 120.0.6099.224-1~deb11u1) forky: resolved (fixed in 120.0.6099.224-1) si

CVE-2025-6554 [HIGH] CVE-2025-6554: chromium - Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote at... Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 138.0.7204.92-1~deb12u1) bullseye: open forky: resolved (fixed in 138.0.7204.92-1) sid: resolved (fixed in 138.0.7204.92-1) trixie: resolved (fixed

CVE-2022-2294 [HIGH] CVE-2022-2294: chromium - Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed ... Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Scope: local bookworm: resolved (fixed in 103.0.5060.114-1) bullseye: resolved (fixed in 103.0.5060.114-1~deb11u1) forky: resolved (fixed in 103.0.5060.114-1) sid: resolved (fixed in 103.0.5060.114-1) trixie

CVE-2020-16009 [HIGH] CVE-2020-16009: chromium - Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allow... Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Scope: local bookworm: resolved (fixed in 87.0.4280.88-0.1) bullseye: resolved (fixed in 87.0.4280.88-0.1) forky: resolved (fixed in 87.0.4280.88-0.1) sid: resolved (fixed in 87.0.4280.88-0.1) trixie: r

CVE-2021-30633 [CRITICAL] CVE-2021-30633: chromium - Use after free in Indexed DB API in Google Chrome prior to 93.0.4577.82 allowed ... Use after free in Indexed DB API in Google Chrome prior to 93.0.4577.82 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Scope: local bookworm: resolved (fixed in 93.0.4577.82-1) bullseye: resolved (fixed in 93.0.4577.82-1) forky: resolved (fixed in 93.0.4577.82-1) sid: resolved

CVE-2022-4135 [CRITICAL] CVE-2022-4135: chromium - Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a r... Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 107.0.5304.121-1) bullseye: resolved (fixed in 107.0.5304.121-1~deb11u1) forky: resolve

CVE-2022-0609 [HIGH] CVE-2022-0609: chromium - Use after free in Animation in Google Chrome prior to 98.0.4758.102 allowed a re... Use after free in Animation in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Scope: local bookworm: resolved (fixed in 98.0.4758.102-1) bullseye: resolved (fixed in 98.0.4758.102-1~deb11u1) forky: resolved (fixed in 98.0.4758.102-1) sid: resolved (fixed in 98.0.4758.102-1) trixie: resolv

CVE-2023-6345 [CRITICAL] CVE-2023-6345: chromium - Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remo... Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 119.0.6045.199-1~deb12u1) bullseye: resolved (fixed in 119.0.6045.199-1~deb11u1) forky: resol

CVE-2025-10585 [CRITICAL] CVE-2025-10585: chromium - Type confusion in V8 in Google Chrome prior to 140.0.7339.185 allowed a remote a... Type confusion in V8 in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 140.0.7339.185-1~deb12u1) bullseye: open forky: resolved (fixed in 140.0.7339.185-1) sid: resolved (fixed in 140.0.7339.185-1) trixie:

CVE-2021-37975 [HIGH] CVE-2021-37975: chromium - Use after free in V8 in Google Chrome prior to 94.0.4606.71 allowed a remote att... Use after free in V8 in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Scope: local bookworm: resolved (fixed in 97.0.4692.71-0.1) bullseye: resolved (fixed in 97.0.4692.71-0.1~deb11u1) forky: resolved (fixed in 97.0.4692.71-0.1) sid: resolved (fixed in 97.0.4692.71-0.1) trixie: resolved

CVE-2022-1096 [HIGH] CVE-2022-1096: chromium - Type confusion in V8 in Google Chrome prior to 99.0.4844.84 allowed a remote att... Type confusion in V8 in Google Chrome prior to 99.0.4844.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Scope: local bookworm: resolved (fixed in 99.0.4844.84-1) bullseye: resolved (fixed in 99.0.4844.84-1~deb11u1) forky: resolved (fixed in 99.0.4844.84-1) sid: resolved (fixed in 99.0.4844.84-1) trixie: resolved (fixed in

CVE-2018-17480 [HIGH] CVE-2018-17480: chromium - Execution of user supplied Javascript during array deserialization leading to an... Execution of user supplied Javascript during array deserialization leading to an out of bounds write in V8 in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Scope: local bookworm: resolved (fixed in 71.0.3578.80-1) bullseye: resolved (fixed in 71.0.3578.80-1) forky: resolved (fixed i

CVE-2022-3038 [HIGH] CVE-2022-3038: chromium - Use after free in Network Service in Google Chrome prior to 105.0.5195.52 allowe... Use after free in Network Service in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Scope: local bookworm: resolved (fixed in 105.0.5195.52-1) bullseye: resolved (fixed in 105.0.5195.52-1~deb11u1) forky: resolved (fixed in 105.0.5195.52-1) sid: resolved (fixed in 105.0.5195.52-1) trixie:

CVE-2021-21166 [HIGH] CVE-2021-21166: chromium - Data race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attac... Data race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Scope: local bookworm: resolved (fixed in 89.0.4389.82-1) bullseye: resolved (fixed in 89.0.4389.82-1) forky: resolved (fixed in 89.0.4389.82-1) sid: resolved (fixed in 89.0.4389.82-1) trixie: resolved (fixed in 89.0.43