Debian Chromium vulnerabilities

CVE-2024-10826 [HIGH] CVE-2024-10826: chromium - Use after free in Family Experiences in Google Chrome on Android prior to 130.0.... Use after free in Family Experiences in Google Chrome on Android prior to 130.0.6723.116 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 130.0.6723.116-1~deb12u1) bullseye: open forky: resolved (fixed in 130.0.6723.116-1) sid: resolved (fixed in 13

CVE-2024-7968 [HIGH] CVE-2024-7968: chromium - Use after free in Autofill in Google Chrome prior to 128.0.6613.84 allowed a rem... Use after free in Autofill in Google Chrome prior to 128.0.6613.84 allowed a remote attacker who had convinced the user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 128.0.6613.84-1~deb12u1) bullseye: open forky: resolved (fixed in 128.

CVE-2021-4322 [HIGH] CVE-2021-4322: chromium - Use after free in DevTools in Google Chrome prior to 91.0.4472.77 allowed an att... Use after free in DevTools in Google Chrome prior to 91.0.4472.77 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension. (Chromium security severity: Medium) Scope: local bookworm: resolved (fixed in 97.0.4692.71-0.1) bullseye: resolved (fixed in 97.0.4692.71-0.1~deb11u1) forky: resolved (fi

CVE-2024-6772 [HIGH] CVE-2024-6772: chromium - Inappropriate implementation in V8 in Google Chrome prior to 126.0.6478.182 allo... Inappropriate implementation in V8 in Google Chrome prior to 126.0.6478.182 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 126.0.6478.182-1~deb12u1) bullseye: open forky: resolved (fixed in 126.0.6478.182-1) sid: resolved (fixed in 126.0.6478.182-1)

CVE-2024-5837 [HIGH] CVE-2024-5837: chromium - Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote at... Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 126.0.6478.56-1~deb12u1) bullseye: open forky: resolved (fixed in 126.0.6478.56-1) sid: resolved (fixed in 126.0.6478.56-1) trixi

CVE-2024-7970 [HIGH] CVE-2024-7970: chromium - Out of bounds write in V8 in Google Chrome prior to 128.0.6613.119 allowed a rem... Out of bounds write in V8 in Google Chrome prior to 128.0.6613.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 128.0.6613.119-1~deb12u1) bullseye: open forky: resolved (fixed in 128.0.6613.119-1) sid: resolved (fixed in 128.0.6613.119-1) trixie:

CVE-2024-5838 [HIGH] CVE-2024-5838: chromium - Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote at... Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 126.0.6478.56-1~deb12u1) bullseye: open forky: resolved (fixed in 126.0.6478.56-1) sid: resolved (fixed in 126.0.6478.56-1) trixie: resolved

CVE-2024-5833 [HIGH] CVE-2024-5833: chromium - Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote at... Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 126.0.6478.56-1~deb12u1) bullseye: open forky: resolved (fixed in 126.0.6478.56-1) sid: resolved (fixed in 126.0.6478.56-1) trixi

CVE-2024-5835 [HIGH] CVE-2024-5835: chromium - Heap buffer overflow in Tab Groups in Google Chrome prior to 126.0.6478.54 allow... Heap buffer overflow in Tab Groups in Google Chrome prior to 126.0.6478.54 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 126.0.6478.56-1~deb12u1) bullseye: open forky: resolved (fixed in 126.0.

CVE-2024-9121 [HIGH] CVE-2024-9121: chromium - Inappropriate implementation in V8 in Google Chrome prior to 129.0.6668.70 allow... Inappropriate implementation in V8 in Google Chrome prior to 129.0.6668.70 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 129.0.6668.70-1~deb12u1) bullseye: open forky: resolved (fixed in 129.0.6668.70-1) sid: resolved (fixed in 129.0.66

CVE-2024-8905 [HIGH] CVE-2024-8905: chromium - Inappropriate implementation in V8 in Google Chrome prior to 129.0.6668.58 allow... Inappropriate implementation in V8 in Google Chrome prior to 129.0.6668.58 allowed a remote attacker to potentially exploit stack corruption via a crafted HTML page. (Chromium security severity: Medium) Scope: local bookworm: resolved (fixed in 129.0.6668.58-1~deb12u1) bullseye: open forky: resolved (fixed in 129.0.6668.58-1) sid: resolved (fixed in 129.0.6668.58-1)

CVE-2025-1006 [HIGH] CVE-2025-1006: chromium - Use after free in Network in Google Chrome prior to 133.0.6943.126 allowed a rem... Use after free in Network in Google Chrome prior to 133.0.6943.126 allowed a remote attacker to potentially exploit heap corruption via a crafted web app. (Chromium security severity: Medium) Scope: local bookworm: resolved (fixed in 133.0.6943.126-1~deb12u1) bullseye: open forky: resolved (fixed in 133.0.6943.126-1) sid: resolved (fixed in 133.0.6943.126-1) trixie:

CVE-2024-9603 [HIGH] CVE-2024-9603: chromium - Type Confusion in V8 in Google Chrome prior to 129.0.6668.100 allowed a remote a... Type Confusion in V8 in Google Chrome prior to 129.0.6668.100 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 129.0.6668.100-1~deb12u1) bullseye: open forky: resolved (fixed in 129.0.6668.100-1) sid: resolved (fixed in 129.0.6668.100-1) trixie: resol

CVE-2024-7969 [HIGH] CVE-2024-7969: chromium - Type Confusion in V8 in Google Chrome prior to 128.0.6613.113 allowed a remote a... Type Confusion in V8 in Google Chrome prior to 128.0.6613.113 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 128.0.6613.113-1~deb12u1) bullseye: open forky: resolved (fixed in 128.0.6613.113-1) sid: resolved (fixed in 128.0.6613.113-1) trixie: resol

CVE-2024-5832 [HIGH] CVE-2024-5832: chromium - Use after free in Dawn in Google Chrome prior to 126.0.6478.54 allowed a remote ... Use after free in Dawn in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 126.0.6478.56-1~deb12u1) bullseye: open forky: resolved (fixed in 126.0.6478.56-1) sid: resolved (fixed in 126.0.6478.56-1) trixie: resolve

CVE-2024-5831 [HIGH] CVE-2024-5831: chromium - Use after free in Dawn in Google Chrome prior to 126.0.6478.54 allowed a remote ... Use after free in Dawn in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 126.0.6478.56-1~deb12u1) bullseye: open forky: resolved (fixed in 126.0.6478.56-1) sid: resolved (fixed in 126.0.6478.56-1) trixie: resolve

CVE-2024-6774 [HIGH] CVE-2024-6774: chromium - Use after free in Screen Capture in Google Chrome prior to 126.0.6478.182 allowe... Use after free in Screen Capture in Google Chrome prior to 126.0.6478.182 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 126.0.6478.182-1~deb12u1) bullseye: open forky: resolved (fixed in 126.0.

CVE-2025-4372 [HIGH] CVE-2025-4372: chromium - Use after free in WebAudio in Google Chrome prior to 136.0.7103.92 allowed a rem... Use after free in WebAudio in Google Chrome prior to 136.0.7103.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) Scope: local bookworm: resolved (fixed in 136.0.7103.92-1~deb12u1) bullseye: open forky: resolved (fixed in 136.0.7103.92-1) sid: resolved (fixed in 136.0.7103.92-1) trixie: r

CVE-2024-8194 [HIGH] CVE-2024-8194: chromium - Type Confusion in V8 in Google Chrome prior to 128.0.6613.113 allowed a remote a... Type Confusion in V8 in Google Chrome prior to 128.0.6613.113 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 128.0.6613.113-1~deb12u1) bullseye: open forky: resolved (fixed in 128.0.6613.113-1) sid: resolved (fixed in 128.0.6613.113-1) trixie: resol

CVE-2024-5846 [HIGH] CVE-2024-5846: chromium - Use after free in PDFium in Google Chrome prior to 126.0.6478.54 allowed a remot... Use after free in PDFium in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: Medium) Scope: local bookworm: resolved (fixed in 126.0.6478.56-1~deb12u1) bullseye: open forky: resolved (fixed in 126.0.6478.56-1) sid: resolved (fixed in 126.0.6478.56-1) trixie: reso