Debian Chromium vulnerabilities

CVE-2020-15990 [HIGH] CVE-2020-15990: chromium - Use after free in autofill in Google Chrome prior to 86.0.4240.75 allowed a remo... Use after free in autofill in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Scope: local bookworm: resolved (fixed in 87.0.4280.88-0.1) bullseye: resolved (fixed in 87.0.4280.88-0.1) forky: resolved (fixed in 87.0.4280.88-0.1) sid: resolved (fix

CVE-2020-15970 [HIGH] CVE-2020-15970: chromium - Use after free in NFC in Google Chrome prior to 86.0.4240.75 allowed a remote at... Use after free in NFC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Scope: local bookworm: resolved (fixed in 87.0.4280.88-0.1) bullseye: resolved (fixed in 87.0.4280.88-0.1) forky: resolved (fixed in 87.0.4280.88-0.1) sid: resolved (fixed in

CVE-2020-15967 [HIGH] CVE-2020-15967: chromium - Use after free in payments in Google Chrome prior to 86.0.4240.75 allowed a remo... Use after free in payments in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Scope: local bookworm: resolved (fixed in 87.0.4280.88-0.1) bullseye: resolved (fixed in 87.0.4280.88-0.1) forky: resolved (fixed in 87.0.4280.88-0.1) sid: resolved (fixed in 87.0.4280.88-0.1) trixie: resolved

CVE-2020-15971 [HIGH] CVE-2020-15971: chromium - Use after free in printing in Google Chrome prior to 86.0.4240.75 allowed a remo... Use after free in printing in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Scope: local bookworm: resolved (fixed in 87.0.4280.88-0.1) bullseye: resolved (fixed in 87.0.4280.88-0.1) forky: resolved (fixed in 87.0.4280.88-0.1) sid: resolved (fix

CVE-2021-21167 [HIGH] CVE-2021-21167: chromium - Use after free in bookmarks in Google Chrome prior to 89.0.4389.72 allowed a rem... Use after free in bookmarks in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Scope: local bookworm: resolved (fixed in 89.0.4389.82-1) bullseye: resolved (fixed in 89.0.4389.82-1) forky: resolved (fixed in 89.0.4389.82-1) sid: resolved (fixed in 89.0.4389.82-1) trixie: resolved (fixed i

CVE-2021-21162 [HIGH] CVE-2021-21162: chromium - Use after free in WebRTC in Google Chrome prior to 89.0.4389.72 allowed a remote... Use after free in WebRTC in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Scope: local bookworm: resolved (fixed in 89.0.4389.82-1) bullseye: resolved (fixed in 89.0.4389.82-1) forky: resolved (fixed in 89.0.4389.82-1) sid: resolved (fixed in 89.0.4389.82-1) trixie: resolved (fixed in 8

CVE-2021-21191 [HIGH] CVE-2021-21191: chromium - Use after free in WebRTC in Google Chrome prior to 89.0.4389.90 allowed a remote... Use after free in WebRTC in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Scope: local bookworm: resolved (fixed in 89.0.4389.90-1) bullseye: resolved (fixed in 89.0.4389.90-1) forky: resolved (fixed in 89.0.4389.90-1) sid: resolved (fixed in 89.0.4389.90-1) trixie: resolved (fixed in 8

CVE-2021-21112 [HIGH] CVE-2021-21112: chromium - Use after free in Blink in Google Chrome prior to 87.0.4280.141 allowed a remote... Use after free in Blink in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Scope: local bookworm: resolved (fixed in 87.0.4280.141-0.1) bullseye: resolved (fixed in 87.0.4280.141-0.1) forky: resolved (fixed in 87.0.4280.141-0.1) sid: resolved (fixed in 87.0.4280.141-0.1) trixie: resolved

CVE-2021-21197 [HIGH] CVE-2021-21197: chromium - Heap buffer overflow in TabStrip in Google Chrome prior to 89.0.4389.114 allowed... Heap buffer overflow in TabStrip in Google Chrome prior to 89.0.4389.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Scope: local bookworm: resolved (fixed in 89.0.4389.114-1) bullseye: resolved (fixed in 89.0.4389.114-1) forky: resolved (fixed in 89.0.4389.114-1) sid: resolved (fixed in 89.0.4389.114-1) trixie: resolve

CVE-2021-30585 [HIGH] CVE-2021-30585: chromium - Use after free in sensor handling in Google Chrome on Windows prior to 92.0.4515... Use after free in sensor handling in Google Chrome on Windows prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Scope: local bookworm: resolved (fixed in 93.0.4577.82-1) bullseye: resolved (fixed in 93.0.4577.82-1) forky: resolved (fixed in 93.0.4577.82-1) sid: resolved (fixed in 93.0.4577.82-1) trixie:

CVE-2021-30569 [HIGH] CVE-2021-30569: chromium - Use after free in sqlite in Google Chrome prior to 92.0.4515.107 allowed a remot... Use after free in sqlite in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Scope: local bookworm: resolved (fixed in 93.0.4577.82-1) bullseye: resolved (fixed in 93.0.4577.82-1) forky: resolved (fixed in 93.0.4577.82-1) sid: resolved (fixed in 93.0.4577.82-1) trixie: resolved (fixed in

CVE-2021-4063 [HIGH] CVE-2021-4063: chromium - Use after free in developer tools in Google Chrome prior to 96.0.4664.93 allowed... Use after free in developer tools in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Scope: local bookworm: resolved (fixed in 97.0.4692.71-0.1) bullseye: resolved (fixed in 97.0.4692.71-0.1~deb11u1) forky: resolved (fixed in 97.0.4692.71-0.1) sid: resolved (fixed in 97.0.4692.71-0.1) trixi

CVE-2021-21195 [HIGH] CVE-2021-21195: chromium - Use after free in V8 in Google Chrome prior to 89.0.4389.114 allowed a remote at... Use after free in V8 in Google Chrome prior to 89.0.4389.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Scope: local bookworm: resolved (fixed in 89.0.4389.114-1) bullseye: resolved (fixed in 89.0.4389.114-1) forky: resolved (fixed in 89.0.4389.114-1) sid: resolved (fixed in 89.0.4389.114-1) trixie: resolved (fixed in

CVE-2022-0104 [HIGH] CVE-2022-0104: chromium - Heap buffer overflow in ANGLE in Google Chrome prior to 97.0.4692.71 allowed a r... Heap buffer overflow in ANGLE in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Scope: local bookworm: resolved (fixed in 97.0.4692.71-0.1) bullseye: resolved (fixed in 97.0.4692.71-0.1~deb11u1) forky: resolved (fixed in 97.0.4692.71-0.1) sid: resolved (fixed in 97.0.4692.71-0.1) trixie: r

CVE-2021-30516 [HIGH] CVE-2021-30516: chromium - Heap buffer overflow in History in Google Chrome prior to 90.0.4430.212 allowed ... Heap buffer overflow in History in Google Chrome prior to 90.0.4430.212 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. Scope: local bookworm: resolved (fixed in 90.0.4430.212-1) bullseye: resolved (fixed in 90.0.4430.212-1) forky: resolved (fixed in 90.0.4430.212-1) sid: resolved (f

CVE-2021-30518 [HIGH] CVE-2021-30518: chromium - Heap buffer overflow in Reader Mode in Google Chrome prior to 90.0.4430.212 allo... Heap buffer overflow in Reader Mode in Google Chrome prior to 90.0.4430.212 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Scope: local bookworm: resolved (fixed in 90.0.4430.212-1) bullseye: resolved (fixed in 90.0.4430.212-1) forky: resolved (fixed in 90.0.4430.212-1) sid: resolved (fixed in 90.0.4430.212-1) trixie: reso

CVE-2022-0096 [HIGH] CVE-2022-0096: chromium - Use after free in Storage in Google Chrome prior to 97.0.4692.71 allowed a remot... Use after free in Storage in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Scope: local bookworm: resolved (fixed in 97.0.4692.71-0.1) bullseye: resolved (fixed in 97.0.4692.71-0.1~deb11u1) forky: resolved (fixed in 97.0.4692.71-0.1) sid: resolved (fixed in 97.0.4692.71-0.1) trixie: resol

CVE-2021-30521 [HIGH] CVE-2021-30521: chromium - Heap buffer overflow in Autofill in Google Chrome on Android prior to 91.0.4472.... Heap buffer overflow in Autofill in Google Chrome on Android prior to 91.0.4472.77 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. Scope: local bookworm: resolved (fixed in 93.0.4577.82-1) bullseye: resolved (fixed in 93.0.4577.82-1) forky: resolved (fixed in 93.0.4577.82-1) sid: resolved (fixed in 93.0.4577.82-1) trixie: r

CVE-2021-4064 [HIGH] CVE-2021-4064: chromium - Use after free in screen capture in Google Chrome on ChromeOS prior to 96.0.4664... Use after free in screen capture in Google Chrome on ChromeOS prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Scope: local bookworm: resolved (fixed in 97.0.4692.71-0.1) bullseye: resolved (fixed in 97.0.4692.71-0.1~deb11u1) forky: resolved (fixed in 97.0.4692.71-0.1) sid: resolved (fixed in 97.0.4692.71

CVE-2021-37961 [HIGH] CVE-2021-37961: chromium - Use after free in Tab Strip in Google Chrome prior to 94.0.4606.54 allowed a rem... Use after free in Tab Strip in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Scope: local bookworm: resolved (fixed in 97.0.4692.71-0.1) bullseye: resolved (fixed in 97.0.4692.71-0.1~deb11u1) forky: resolved (fixed in 97.0.4692.71-0.1) sid: resolved (fixed in 97.0.4692.71-0.1) trixie: r