Debian Chromium vulnerabilities

CVE-2024-9602 [HIGH] CVE-2024-9602: chromium - Type Confusion in V8 in Google Chrome prior to 129.0.6668.100 allowed a remote a... Type Confusion in V8 in Google Chrome prior to 129.0.6668.100 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 129.0.6668.100-1~deb12u1) bullseye: open forky: resolved (fixed in 129.0.6668.100-1) sid: resolved (fixed in 129.0.6668.100-1) trixie: res

CVE-2024-7533 [HIGH] CVE-2024-7533: chromium - Use after free in Sharing in Google Chrome on iOS prior to 127.0.6533.99 allowed... Use after free in Sharing in Google Chrome on iOS prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 127.0.6533.99-1~deb12u1) bullseye: open forky: resolved (fixed in 127.0.6533.99-1) sid: resolved (fixed in 127.0.6533.99-1) trixi

CVE-2024-7535 [HIGH] CVE-2024-7535: chromium - Inappropriate implementation in V8 in Google Chrome prior to 127.0.6533.99 allow... Inappropriate implementation in V8 in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 127.0.6533.99-1~deb12u1) bullseye: open forky: resolved (fixed in 127.0.6533.99-1) sid: resolved (fixed in 127.0.6533.99-1) tri

CVE-2024-6102 [HIGH] CVE-2024-6102: chromium - Out of bounds memory access in Dawn in Google Chrome prior to 126.0.6478.114 all... Out of bounds memory access in Dawn in Google Chrome prior to 126.0.6478.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 126.0.6478.114-1~deb12u1) bullseye: open forky: resolved (fixed in 126.0.6478.114-1) sid: resolved (fixed in 126.0.6478.114-1

CVE-2021-4319 [HIGH] CVE-2021-4319: chromium - Use after free in Blink in Google Chrome prior to 93.0.4577.82 allowed a remote ... Use after free in Blink in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 97.0.4692.71-0.1) bullseye: resolved (fixed in 97.0.4692.71-0.1~deb11u1) forky: resolved (fixed in 97.0.4692.71-0.1) sid: resolved (fixed in 97.0.

CVE-2024-7025 [HIGH] CVE-2024-7025: chromium - Integer overflow in Layout in Google Chrome prior to 129.0.6668.89 allowed a rem... Integer overflow in Layout in Google Chrome prior to 129.0.6668.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 129.0.6668.89-1~deb12u1) bullseye: open forky: resolved (fixed in 129.0.6668.89-1) sid: resolved (fixed in 129.0.6668.89-1) trixie: res

CVE-2022-4918 [HIGH] CVE-2022-4918: chromium - Use after free in UI in Google Chrome prior to 102.0.5005.61 allowed a remote at... Use after free in UI in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: Medium) Scope: local bookworm: resolved (fixed in 102.0.5005.61-1) bullseye: resolved (fixed in 102.0.5005.61-1~deb11u1) forky: resolved (fixed in 102.0.5005.61-1) sid: resolved (fixed in 102.0.50

CVE-2022-4919 [HIGH] CVE-2022-4919: chromium - Use after free in Base Internals in Google Chrome prior to 101.0.4951.41 allowed... Use after free in Base Internals in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 101.0.4951.41-1) bullseye: resolved (fixed in 101.0.4951.41-1~deb11u1) forky: resolved (fixed in 101.0.4951.41-1) sid: resolved (fixed i

CVE-2022-4916 [HIGH] CVE-2022-4916: chromium - Use after free in Media in Google Chrome prior to 103.0.5060.53 allowed a remote... Use after free in Media in Google Chrome prior to 103.0.5060.53 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 103.0.5060.53-1) bullseye: resolved (fixed in 103.0.5060.53-1~deb11u1) forky: resolved (fixed in 103.0.5060.53-1) sid: resolved (fixed in 103.0.5

CVE-2023-6705 [HIGH] CVE-2023-6705: chromium - Use after free in WebRTC in Google Chrome prior to 120.0.6099.109 allowed a remo... Use after free in WebRTC in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 120.0.6099.109-1~deb12u1) bullseye: resolved (fixed in 120.0.6099.109-1~deb11u1) forky: resolved (fixed in 120.0.6099.109-1) sid: resolv

CVE-2021-4317 [HIGH] CVE-2021-4317: chromium - Use after free in ANGLE in Google Chrome prior to 96.0.4664.93 allowed a remote ... Use after free in ANGLE in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 97.0.4692.71-0.1) bullseye: resolved (fixed in 97.0.4692.71-0.1~deb11u1) forky: resolved (fixed in 97.0.4692.71-0.1) sid: resolved (fixed in 97.0.

CVE-2021-4320 [HIGH] CVE-2021-4320: chromium - Use after free in Blink in Google Chrome prior to 92.0.4515.107 allowed a remote... Use after free in Blink in Google Chrome prior to 92.0.4515.107 allowed a remote attacker who had compromised the renderer process to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 97.0.4692.71-0.1) bullseye: resolved (fixed in 97.0.4692.71-0.1~deb11u1) forky: resolved (fixed in 97.0.

CVE-2023-2313 [HIGH] CVE-2023-2313: chromium - Inappropriate implementation in Sandbox in Google Chrome on Windows prior to 112... Inappropriate implementation in Sandbox in Google Chrome on Windows prior to 112.0.5615.49 allowed a remote attacker who had compromised the renderer process to perform arbitrary read/write via a malicious file. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 112.0.5615.49-1) bullseye: resolved (fixed in 112.0.5615.49-2~deb11u2) forky: re

CVE-2023-6703 [HIGH] CVE-2023-6703: chromium - Use after free in Blink in Google Chrome prior to 120.0.6099.109 allowed a remot... Use after free in Blink in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 120.0.6099.109-1~deb12u1) bullseye: resolved (fixed in 120.0.6099.109-1~deb11u1) forky: resolved (fixed in 120.0.6099.109-1) sid: resolve

CVE-2024-6988 [HIGH] CVE-2024-6988: chromium - Use after free in Downloads in Google Chrome on iOS prior to 127.0.6533.72 allow... Use after free in Downloads in Google Chrome on iOS prior to 127.0.6533.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 127.0.6533.88-1~deb12u1) bullseye: open forky: resolved (fixed in 127.0.6533.88-1) sid: resolved (fixed in 127.0.6533.88-1) tri

CVE-2024-6994 [HIGH] CVE-2024-6994: chromium - Heap buffer overflow in Layout in Google Chrome prior to 127.0.6533.72 allowed a... Heap buffer overflow in Layout in Google Chrome prior to 127.0.6533.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) Scope: local bookworm: resolved (fixed in 127.0.6533.88-1~deb12u1) bullseye: open forky: resolved (fixed in 127.0.6533.88-1) sid: resolved (fixed in 127.0.6533.88-1) trixi

CVE-2024-5160 [HIGH] CVE-2024-5160: chromium - Heap buffer overflow in Dawn in Google Chrome prior to 125.0.6422.76 allowed a r... Heap buffer overflow in Dawn in Google Chrome prior to 125.0.6422.76 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 125.0.6422.76-1~deb12u1) bullseye: open forky: resolved (fixed in 125.0.6422.76-1) sid: resolved (fixed in 125.0.6422.76-1) trixie:

CVE-2024-7967 [HIGH] CVE-2024-7967: chromium - Heap buffer overflow in Fonts in Google Chrome prior to 128.0.6613.84 allowed a ... Heap buffer overflow in Fonts in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 128.0.6613.84-1~deb12u1) bullseye: open forky: resolved (fixed in 128.0.6613.84-1) sid: resolved (fixed in 128.0.6613.84-1) trixie:

CVE-2025-0436 [HIGH] CVE-2025-0436: chromium - Integer overflow in Skia in Google Chrome prior to 132.0.6834.83 allowed a remot... Integer overflow in Skia in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 132.0.6834.83-1~deb12u1) bullseye: open forky: resolved (fixed in 132.0.6834.83-1) sid: resolved (fixed in 132.0.6834.83-1) trixie: resol

CVE-2024-7972 [HIGH] CVE-2024-7972: chromium - Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allow... Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium) Scope: local bookworm: resolved (fixed in 128.0.6613.84-1~deb12u1) bullseye: open forky: resolved (fixed in 128.0.6613.84-1) sid: resolved (fixed in 128.0.