Debian Chromium vulnerabilities

CVE-2022-4907 [HIGH] CVE-2022-4907: chromium - Uninitialized Use in FFmpeg in Google Chrome prior to 108.0.5359.71 allowed a re... Uninitialized Use in FFmpeg in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium) Scope: local bookworm: resolved (fixed in 108.0.5359.71-1) bullseye: resolved (fixed in 108.0.5359.71-2~deb11u1) forky: resolved (fixed in 108.0.5359.71-1) sid: resolved

CVE-2024-4368 [HIGH] CVE-2024-4368: chromium - Use after free in Dawn in Google Chrome prior to 124.0.6367.118 allowed a remote... Use after free in Dawn in Google Chrome prior to 124.0.6367.118 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 124.0.6367.118-1~deb12u1) bullseye: open forky: resolved (fixed in 124.0.6367.118-1) sid: resolved (fixed in 124.0.6367.118-1) trixie: res

CVE-2025-2476 [HIGH] CVE-2025-2476: chromium - Use after free in Lens in Google Chrome prior to 134.0.6998.117 allowed a remote... Use after free in Lens in Google Chrome prior to 134.0.6998.117 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical) Scope: local bookworm: resolved (fixed in 134.0.6998.117-1~deb12u1) bullseye: open forky: resolved (fixed in 134.0.6998.117-1) sid: resolved (fixed in 134.0.6998.117-1) trixie:

CVE-2024-0224 [HIGH] CVE-2024-0224: chromium - Use after free in WebAudio in Google Chrome prior to 120.0.6099.199 allowed a re... Use after free in WebAudio in Google Chrome prior to 120.0.6099.199 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 120.0.6099.199-1~deb12u1) bullseye: resolved (fixed in 120.0.6099.199-1~deb11u1) forky: resolved (fixed in 120.0.6099.199-1) sid: reso

CVE-2024-0225 [HIGH] CVE-2024-0225: chromium - Use after free in WebGPU in Google Chrome prior to 120.0.6099.199 allowed a remo... Use after free in WebGPU in Google Chrome prior to 120.0.6099.199 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 120.0.6099.199-1~deb12u1) bullseye: resolved (fixed in 120.0.6099.199-1~deb11u1) forky: resolved (fixed in 120.0.6099.199-1) sid: resolv

CVE-2024-9955 [HIGH] CVE-2024-9955: chromium - Use after free in WebAuthentication in Google Chrome prior to 130.0.6723.58 allo... Use after free in WebAuthentication in Google Chrome prior to 130.0.6723.58 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) Scope: local bookworm: resolved (fixed in 130.0.6723.58-1~deb12u1) bullseye: open forky: resolved (fixed in 130.0.6723.58-1) sid: resolved (fixed in 130.0.6723.58-1)

CVE-2024-12053 [HIGH] CVE-2024-12053: chromium - Type Confusion in V8 in Google Chrome prior to 131.0.6778.108 allowed a remote a... Type Confusion in V8 in Google Chrome prior to 131.0.6778.108 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 131.0.6778.108-1~deb12u1) bullseye: open forky: resolved (fixed in 131.0.6778.108-1) sid: resolved (fixed in 131.0.6778.108-1) trixie: r

CVE-2024-0518 [HIGH] CVE-2024-0518: chromium - Type confusion in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote a... Type confusion in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 120.0.6099.224-1~deb12u1) bullseye: resolved (fixed in 120.0.6099.224-1~deb11u1) forky: resolved (fixed in 120.0.6099.224-1) sid: resolved (

CVE-2024-1060 [HIGH] CVE-2024-1060: chromium - Use after free in Canvas in Google Chrome prior to 121.0.6167.139 allowed a remo... Use after free in Canvas in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 121.0.6167.139-1~deb12u1) bullseye: open forky: resolved (fixed in 121.0.6167.139-1) sid: resolved (fixed in 121.0.6167.139-1) trixie: r

CVE-2024-5493 [HIGH] CVE-2024-5493: chromium - Heap buffer overflow in WebRTC in Google Chrome prior to 125.0.6422.141 allowed ... Heap buffer overflow in WebRTC in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 125.0.6422.141-1~deb12u1) bullseye: open forky: resolved (fixed in 125.0.6422.141-1) sid: resolved (fixed in 125.0.6422.141-1) tri

CVE-2024-5497 [HIGH] CVE-2024-5497: chromium - Out of bounds memory access in Browser UI in Google Chrome prior to 125.0.6422.1... Out of bounds memory access in Browser UI in Google Chrome prior to 125.0.6422.141 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 125.0.6422.141-1~deb12u1) bullseye: open forky: resolved (fixed

CVE-2024-6101 [HIGH] CVE-2024-6101: chromium - Inappropriate implementation in V8 in Google Chrome prior to 126.0.6478.114 allo... Inappropriate implementation in V8 in Google Chrome prior to 126.0.6478.114 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 126.0.6478.114-1~deb12u1) bullseye: open forky: resolved (fixed in 126.0.6478.114-1) sid: resolved (fixed in 126.0.6478.114-1)

CVE-2024-3158 [HIGH] CVE-2024-3158: chromium - Use after free in Bookmarks in Google Chrome prior to 123.0.6312.105 allowed a r... Use after free in Bookmarks in Google Chrome prior to 123.0.6312.105 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 123.0.6312.105-1~deb12u1) bullseye: open forky: resolved (fixed in 123.0.6312.105-1) sid: resolved (fixed in 123.0.6312.105-1) trixie

CVE-2024-5495 [HIGH] CVE-2024-5495: chromium - Use after free in Dawn in Google Chrome prior to 125.0.6422.141 allowed a remote... Use after free in Dawn in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 125.0.6422.141-1~deb12u1) bullseye: open forky: resolved (fixed in 125.0.6422.141-1) sid: resolved (fixed in 125.0.6422.141-1) trixie: res

CVE-2024-7534 [HIGH] CVE-2024-7534: chromium - Heap buffer overflow in Layout in Google Chrome prior to 127.0.6533.99 allowed a... Heap buffer overflow in Layout in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 127.0.6533.99-1~deb12u1) bullseye: open forky: resolved (fixed in 127.0.6533.99-1) sid: resolved (fixed in 127.0.6533.99-1) trixie:

CVE-2024-5494 [HIGH] CVE-2024-5494: chromium - Use after free in Dawn in Google Chrome prior to 125.0.6422.141 allowed a remote... Use after free in Dawn in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 125.0.6422.141-1~deb12u1) bullseye: open forky: resolved (fixed in 125.0.6422.141-1) sid: resolved (fixed in 125.0.6422.141-1) trixie: res

CVE-2024-7550 [HIGH] CVE-2024-7550: chromium - Type Confusion in V8 in Google Chrome prior to 127.0.6533.99 allowed a remote at... Type Confusion in V8 in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 127.0.6533.99-1~deb12u1) bullseye: open forky: resolved (fixed in 127.0.6533.99-1) sid: resolved (fixed in 127.0.6533.99-1) trixie: resolved

CVE-2024-7966 [HIGH] CVE-2024-7966: chromium - Out of bounds memory access in Skia in Google Chrome prior to 128.0.6613.84 allo... Out of bounds memory access in Skia in Google Chrome prior to 128.0.6613.84 allowed a remote attacker who had compromised the renderer process to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 128.0.6613.84-1~deb12u1) bullseye: open forky: resolved (fixed in 128.0.6613.84-1) si

CVE-2024-2400 [HIGH] CVE-2024-2400: chromium - Use after free in Performance Manager in Google Chrome prior to 122.0.6261.128 a... Use after free in Performance Manager in Google Chrome prior to 122.0.6261.128 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 122.0.6261.128-1~deb12u1) bullseye: open forky: resolved (fixed in 122.0.6261.128-1) sid: resolved (fixed in 122.0.6261.128

CVE-2024-10827 [HIGH] CVE-2024-10827: chromium - Use after free in Serial in Google Chrome prior to 130.0.6723.116 allowed a remo... Use after free in Serial in Google Chrome prior to 130.0.6723.116 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 130.0.6723.116-1~deb12u1) bullseye: open forky: resolved (fixed in 130.0.6723.116-1) sid: resolved (fixed in 130.0.6723.116-1) trixie: