Debian Chromium vulnerabilities

CVE-2022-2296 [HIGH] CVE-2022-2296: chromium - Use after free in Chrome OS Shell in Google Chrome on Chrome OS prior to 103.0.5... Use after free in Chrome OS Shell in Google Chrome on Chrome OS prior to 103.0.5060.114 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via direct UI interactions. Scope: local bookworm: resolved (fixed in 103.0.5060.114-1) bullseye: resolved (fixed in 103.0.5060.114-1~deb11u1) forky: resol

CVE-2023-6347 [HIGH] CVE-2023-6347: chromium - Use after free in Mojo in Google Chrome prior to 119.0.6045.199 allowed a remote... Use after free in Mojo in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 119.0.6045.199-1~deb12u1) bullseye: resolved (fixed in 119.0.6045.199-1~deb11u1) forky: resolved (fixed in 119.0.6045.199-1) sid: resolved

CVE-2023-6348 [HIGH] CVE-2023-6348: chromium - Type Confusion in Spellcheck in Google Chrome prior to 119.0.6045.199 allowed a ... Type Confusion in Spellcheck in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 119.0.6045.199-1~deb12u1) bullseye: resolved (fixed in 119.0.6045.199-1~deb11u1) forky: res

CVE-2024-0222 [HIGH] CVE-2024-0222: chromium - Use after free in ANGLE in Google Chrome prior to 120.0.6099.199 allowed a remot... Use after free in ANGLE in Google Chrome prior to 120.0.6099.199 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 120.0.6099.199-1~deb12u1) bullseye: resolved (fixed in 120.0.6099.199-1~deb11u1) forky: resolved

CVE-2023-6508 [HIGH] CVE-2023-6508: chromium - Use after free in Media Stream in Google Chrome prior to 120.0.6099.62 allowed a... Use after free in Media Stream in Google Chrome prior to 120.0.6099.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 120.0.6099.71-1~deb12u1) bullseye: resolved (fixed in 120.0.6099.71-1~deb11u1) forky: resolved (fixed in 120.0.6099.71-1) sid: reso

CVE-2024-7532 [HIGH] CVE-2024-7532: chromium - Out of bounds memory access in ANGLE in Google Chrome prior to 127.0.6533.99 all... Out of bounds memory access in ANGLE in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical) Scope: local bookworm: resolved (fixed in 127.0.6533.99-1~deb12u1) bullseye: open forky: resolved (fixed in 127.0.6533.99-1) sid: resolved (fixed in 127.0.6533.99-

CVE-2023-5997 [HIGH] CVE-2023-5997: chromium - Use after free in Garbage Collection in Google Chrome prior to 119.0.6045.159 al... Use after free in Garbage Collection in Google Chrome prior to 119.0.6045.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 119.0.6045.159-1~deb12u1) bullseye: resolved (fixed in 119.0.6045.159-1~deb11u1) forky: resolved (fixed in 119.0.6045.159-1)

CVE-2023-6346 [HIGH] CVE-2023-6346: chromium - Use after free in WebAudio in Google Chrome prior to 119.0.6045.199 allowed a re... Use after free in WebAudio in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 119.0.6045.199-1~deb12u1) bullseye: resolved (fixed in 119.0.6045.199-1~deb11u1) forky: resolved (fixed in 119.0.6045.199-1) sid: reso

CVE-2023-4572 [HIGH] CVE-2023-4572: chromium - Use after free in MediaStream in Google Chrome prior to 116.0.5845.140 allowed a... Use after free in MediaStream in Google Chrome prior to 116.0.5845.140 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 116.0.5845.140-1~deb12u1) bullseye: resolved (fixed in 116.0.5845.140-1~deb11u1) forky: resolved (fixed in 116.0.5845.140-1) sid: r

CVE-2024-1669 [HIGH] CVE-2024-1669: chromium - Out of bounds memory access in Blink in Google Chrome prior to 122.0.6261.57 all... Out of bounds memory access in Blink in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 122.0.6261.57-1~deb12u1) bullseye: open forky: resolved (fixed in 122.0.6261.57-1) sid: resolved (fixed in 122.0.6261.57-1) t

CVE-2024-1059 [HIGH] CVE-2024-1059: chromium - Use after free in Peer Connection in Google Chrome prior to 121.0.6167.139 allow... Use after free in Peer Connection in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to potentially exploit stack corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 121.0.6167.139-1~deb12u1) bullseye: open forky: resolved (fixed in 121.0.6167.139-1) sid: resolved (fixed in 121.0.6167.139-1)

CVE-2024-1077 [HIGH] CVE-2024-1077: chromium - Use after free in Network in Google Chrome prior to 121.0.6167.139 allowed a rem... Use after free in Network in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to potentially exploit heap corruption via a malicious file. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 121.0.6167.139-1~deb12u1) bullseye: open forky: resolved (fixed in 121.0.6167.139-1) sid: resolved (fixed in 121.0.6167.139-1) trixie: res

CVE-2023-5186 [HIGH] CVE-2023-5186: chromium - Use after free in Passwords in Google Chrome prior to 117.0.5938.132 allowed a r... Use after free in Passwords in Google Chrome prior to 117.0.5938.132 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via crafted UI interaction. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 117.0.5938.132-1~deb12u1) bullseye: resolved (fixed in 117.0.5938.132-1~

CVE-2024-6990 [HIGH] CVE-2024-6990: chromium - Uninitialized Use in Dawn in Google Chrome on Android prior to 127.0.6533.88 all... Uninitialized Use in Dawn in Google Chrome on Android prior to 127.0.6533.88 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Critical) Scope: local bookworm: resolved (fixed in 127.0.6533.88-1~deb12u1) bullseye: open forky: resolved (fixed in 127.0.6533.88-1) sid: resolved (fixed in 12

CVE-2023-4429 [HIGH] CVE-2023-4429: chromium - Use after free in Loader in Google Chrome prior to 116.0.5845.110 allowed a remo... Use after free in Loader in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 116.0.5845.110-1~deb12u1) bullseye: resolved (fixed in 116.0.5845.110-1~deb11u1) forky: resolved (fixed in 116.0.5845.110-1) sid: resolv

CVE-2023-6351 [HIGH] CVE-2023-6351: chromium - Use after free in libavif in Google Chrome prior to 119.0.6045.199 allowed a rem... Use after free in libavif in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption via a crafted avif file. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 119.0.6045.199-1~deb12u1) bullseye: resolved (fixed in 119.0.6045.199-1~deb11u1) forky: resolved (fixed in 119.0.6045.199-1) sid: resol

CVE-2023-5476 [HIGH] CVE-2023-5476: chromium - Use after free in Blink History in Google Chrome prior to 118.0.5993.70 allowed ... Use after free in Blink History in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) Scope: local bookworm: resolved (fixed in 118.0.5993.70-1~deb12u1) bullseye: resolved (fixed in 118.0.5993.70-1~deb11u1) forky: resolved (fixed in 118.0.5993.70-1) sid: r

CVE-2024-2627 [HIGH] CVE-2024-2627: chromium - Use after free in Canvas in Google Chrome prior to 123.0.6312.58 allowed a remot... Use after free in Canvas in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) Scope: local bookworm: resolved (fixed in 123.0.6312.86-1~deb12u1) bullseye: open forky: resolved (fixed in 123.0.6312.58-1) sid: resolved (fixed in 123.0.6312.58-1) trixie: res

CVE-2024-10487 [HIGH] CVE-2024-10487: chromium - Out of bounds write in Dawn in Google Chrome prior to 130.0.6723.92 allowed a re... Out of bounds write in Dawn in Google Chrome prior to 130.0.6723.92 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Critical) Scope: local bookworm: resolved (fixed in 130.0.6723.91-1~deb12u1) bullseye: open forky: resolved (fixed in 130.0.6723.91-1) sid: resolved (fixed in 130.0.6723.91-1) trix

CVE-2023-4351 [HIGH] CVE-2023-4351: chromium - Use after free in Network in Google Chrome prior to 116.0.5845.96 allowed a remo... Use after free in Network in Google Chrome prior to 116.0.5845.96 allowed a remote attacker who has elicited a browser shutdown to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 116.0.5845.96-1~deb12u1) bullseye: resolved (fixed in 116.0.5845.96-1~deb11u1) forky: resolved (fixe