Debian Chromium vulnerabilities

CVE-2024-7536 [HIGH] CVE-2024-7536: chromium - Use after free in WebAudio in Google Chrome prior to 127.0.6533.99 allowed a rem... Use after free in WebAudio in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 127.0.6533.99-1~deb12u1) bullseye: open forky: resolved (fixed in 127.0.6533.99-1) sid: resolved (fixed in 127.0.6533.99-1) trixie: res

CVE-2024-10230 [HIGH] CVE-2024-10230: chromium - Type Confusion in V8 in Google Chrome prior to 130.0.6723.69 allowed a remote at... Type Confusion in V8 in Google Chrome prior to 130.0.6723.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 130.0.6723.69-1~deb12u1) bullseye: open forky: resolved (fixed in 130.0.6723.69-1) sid: resolved (fixed in 130.0.6723.69-1) trixie: resolve

CVE-2023-6704 [HIGH] CVE-2023-6704: chromium - Use after free in libavif in Google Chrome prior to 120.0.6099.109 allowed a rem... Use after free in libavif in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap corruption via a crafted image file. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 120.0.6099.109-1~deb12u1) bullseye: resolved (fixed in 120.0.6099.109-1~deb11u1) forky: resolved (fixed in 120.0.6099.109-1) sid: reso

CVE-2022-4921 [HIGH] CVE-2022-4921: chromium - Use after free in Accessibility in Google Chrome prior to 99.0.4844.51 allowed a... Use after free in Accessibility in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: Low) Scope: local bookworm: resolved (fixed in 99.0.4844.51-1) bullseye: resolved (fixed in 99.0.4844.51-1~deb11u1) forky: resolved

CVE-2024-6291 [HIGH] CVE-2024-6291: chromium - Use after free in Swiftshader in Google Chrome prior to 126.0.6478.126 allowed a... Use after free in Swiftshader in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 126.0.6478.126-1~deb12u1) bullseye: open forky: resolved (fixed in 126.0.6478.126-1) sid: resolved (fixed in 126.0.6478.126-1) trix

CVE-2024-8636 [HIGH] CVE-2024-8636: chromium - Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.137 allowed a ... Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 128.0.6613.137-1~deb12u1) bullseye: open forky: resolved (fixed in 128.0.6613.137-1) sid: resolved (fixed in 128.0.6613.137-1) trixi

CVE-2024-6989 [HIGH] CVE-2024-6989: chromium - Use after free in Loader in Google Chrome prior to 127.0.6533.72 allowed a remot... Use after free in Loader in Google Chrome prior to 127.0.6533.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 127.0.6533.88-1~deb12u1) bullseye: open forky: resolved (fixed in 127.0.6533.88-1) sid: resolved (fixed in 127.0.6533.88-1) trixie: resol

CVE-2024-6991 [HIGH] CVE-2024-6991: chromium - Use after free in Dawn in Google Chrome prior to 127.0.6533.72 allowed a remote ... Use after free in Dawn in Google Chrome prior to 127.0.6533.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 127.0.6533.88-1~deb12u1) bullseye: open forky: resolved (fixed in 127.0.6533.88-1) sid: resolved (fixed in 127.0.6533.88-1) trixie: resolve

CVE-2025-10200 [HIGH] CVE-2025-10200: chromium - Use after free in Serviceworker in Google Chrome on Desktop prior to 140.0.7339.... Use after free in Serviceworker in Google Chrome on Desktop prior to 140.0.7339.127 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical) Scope: local bookworm: resolved (fixed in 140.0.7339.127-1~deb12u1) bullseye: open forky: resolved (fixed in 140.0.7339.127-1) sid: resolved (fixed in 140

CVE-2024-6103 [HIGH] CVE-2024-6103: chromium - Use after free in Dawn in Google Chrome prior to 126.0.6478.114 allowed a remote... Use after free in Dawn in Google Chrome prior to 126.0.6478.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 126.0.6478.114-1~deb12u1) bullseye: open forky: resolved (fixed in 126.0.6478.114-1) sid: resolved (fixed in 126.0.6478.114-1) trixie: res

CVE-2025-0999 [HIGH] CVE-2025-0999: chromium - Heap buffer overflow in V8 in Google Chrome prior to 133.0.6943.126 allowed a re... Heap buffer overflow in V8 in Google Chrome prior to 133.0.6943.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 133.0.6943.126-1~deb12u1) bullseye: open forky: resolved (fixed in 133.0.6943.126-1) sid: resolved (fixed in 133.0.6943.126-1) trixie:

CVE-2024-6290 [HIGH] CVE-2024-6290: chromium - Use after free in Dawn in Google Chrome prior to 126.0.6478.126 allowed a remote... Use after free in Dawn in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 126.0.6478.126-1~deb12u1) bullseye: open forky: resolved (fixed in 126.0.6478.126-1) sid: resolved (fixed in 126.0.6478.126-1) trixie: res

CVE-2024-6292 [HIGH] CVE-2024-6292: chromium - Use after free in Dawn in Google Chrome prior to 126.0.6478.126 allowed a remote... Use after free in Dawn in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 126.0.6478.126-1~deb12u1) bullseye: open forky: resolved (fixed in 126.0.6478.126-1) sid: resolved (fixed in 126.0.6478.126-1) trixie: res

CVE-2024-6293 [HIGH] CVE-2024-6293: chromium - Use after free in Dawn in Google Chrome prior to 126.0.6478.126 allowed a remote... Use after free in Dawn in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 126.0.6478.126-1~deb12u1) bullseye: open forky: resolved (fixed in 126.0.6478.126-1) sid: resolved (fixed in 126.0.6478.126-1) trixie: res

CVE-2024-8198 [HIGH] CVE-2024-8198: chromium - Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.113 allowed a ... Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.113 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 128.0.6613.113-1~deb12u1) bullseye: open forky: resolved (fixed in 128.0.6613.113-1) sid: r

CVE-2024-10488 [HIGH] CVE-2024-10488: chromium - Use after free in WebRTC in Google Chrome prior to 130.0.6723.92 allowed a remot... Use after free in WebRTC in Google Chrome prior to 130.0.6723.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 130.0.6723.91-1~deb12u1) bullseye: open forky: resolved (fixed in 130.0.6723.91-1) sid: resolved (fixed in 130.0.6723.91-1) trixie: res

CVE-2024-8193 [HIGH] CVE-2024-8193: chromium - Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.113 allowed a ... Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.113 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 128.0.6613.113-1~deb12u1) bullseye: open forky: resolved (fixed in 128.0.6613.113-1) sid: r

CVE-2025-1426 [HIGH] CVE-2025-1426: chromium - Heap buffer overflow in GPU in Google Chrome on Android prior to 133.0.6943.126 ... Heap buffer overflow in GPU in Google Chrome on Android prior to 133.0.6943.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 133.0.6943.126-1~deb12u1) bullseye: open forky: resolved (fixed in 133.0.6943.126-1) sid: resolved (fixed in 133.0.6943.12

CVE-2024-5834 [HIGH] CVE-2024-5834: chromium - Inappropriate implementation in Dawn in Google Chrome prior to 126.0.6478.54 all... Inappropriate implementation in Dawn in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 126.0.6478.56-1~deb12u1) bullseye: open forky: resolved (fixed in 126.0.6478.56-1) sid: resolved (fixed in 126.0.6478.56-1) trixie: resolv

CVE-2024-8362 [HIGH] CVE-2024-8362: chromium - Use after free in WebAudio in Google Chrome prior to 128.0.6613.119 allowed a re... Use after free in WebAudio in Google Chrome prior to 128.0.6613.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 128.0.6613.119-1~deb12u1) bullseye: open forky: resolved (fixed in 128.0.6613.119-1) sid: resolved (fixed in 128.0.6613.119-1) trixie: