Debian Chromium vulnerabilities

CVE-2022-3071 [HIGH] CVE-2022-3071: chromium - Use after free in Tab Strip in Google Chrome on Chrome OS, Lacros prior to 105.0... Use after free in Tab Strip in Google Chrome on Chrome OS, Lacros prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via crafted UI interaction. Scope: local bookworm: resolved (fixed in 105.0.5195.52-1) bullseye: resolved (fixed in 105.0.5195.52-1~deb11u1) forky: resolved

CVE-2022-4914 [HIGH] CVE-2022-4914: chromium - Heap buffer overflow in PrintPreview in Google Chrome prior to 104.0.5112.79 all... Heap buffer overflow in PrintPreview in Google Chrome prior to 104.0.5112.79 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) Scope: local bookworm: resolved (fixed in 104.0.5112.79-1) bullseye: resolved (fixed in 104.0.5112.79-1~deb11u1) fork

CVE-2023-1216 [HIGH] CVE-2023-1216: chromium - Use after free in DevTools in Google Chrome prior to 111.0.5563.64 allowed a rem... Use after free in DevTools in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had convienced the user to engage in direct UI interaction to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 111.0.5563.64-1) bullseye: resolved (fixed in 111.0.5563.64-1~deb11u1) f

CVE-2022-2609 [HIGH] CVE-2022-2609: chromium - Use after free in Nearby Share in Google Chrome on Chrome OS prior to 104.0.5112... Use after free in Nearby Share in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via specific UI interactions. Scope: local bookworm: resolved (fixed in 104.0.5112.79-1) bullseye: resolved (fixed in 104.0.5112.79-1~deb11u1) forky: resolved

CVE-2022-2608 [HIGH] CVE-2022-2608: chromium - Use after free in Overview Mode in Google Chrome on Chrome OS prior to 104.0.511... Use after free in Overview Mode in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via specific UI interactions. Scope: local bookworm: resolved (fixed in 104.0.5112.79-1) bullseye: resolved (fixed in 104.0.5112.79-1~deb11u1) forky: resolved

CVE-2023-0129 [HIGH] CVE-2023-0129: chromium - Heap buffer overflow in Network Service in Google Chrome prior to 109.0.5414.74 ... Heap buffer overflow in Network Service in Google Chrome prior to 109.0.5414.74 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page and specific interactions. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 109.0.5414.74-1) bullseye: resolved (fixed in 10

CVE-2022-2607 [HIGH] CVE-2022-2607: chromium - Use after free in Tab Strip in Google Chrome on Chrome OS prior to 104.0.5112.79... Use after free in Tab Strip in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via specific UI interactions. Scope: local bookworm: resolved (fixed in 104.0.5112.79-1) bullseye: resolved (fixed in 104.0.5112.79-1~deb11u1) forky: resolved (fi

CVE-2022-4179 [HIGH] CVE-2022-4179: chromium - Use after free in Audio in Google Chrome prior to 108.0.5359.71 allowed an attac... Use after free in Audio in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 108.0.5359.71-1) bullseye: resolved (fixed in 108.0.5359.71-2~deb11u1) forky: resol

CVE-2022-4180 [HIGH] CVE-2022-4180: chromium - Use after free in Mojo in Google Chrome prior to 108.0.5359.71 allowed an attack... Use after free in Mojo in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 108.0.5359.71-1) bullseye: resolved (fixed in 108.0.5359.71-2~deb11u1) forky: resolv

CVE-2023-1227 [HIGH] CVE-2023-1227: chromium - Use after free in Core in Google Chrome on Lacros prior to 111.0.5563.64 allowed... Use after free in Core in Google Chrome on Lacros prior to 111.0.5563.64 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via crafted UI interaction. (Chromium security severity: Medium) Scope: local bookworm: resolved (fixed in 111.0.5563.64-1) bullseye: resolved (fixed in 111.0.5563.64-1~deb1

CVE-2025-3068 [HIGH] CVE-2025-3068: chromium - Inappropriate implementation in Intents in Google Chrome on Android prior to 135... Inappropriate implementation in Intents in Google Chrome on Android prior to 135.0.7049.52 allowed a remote attacker to perform privilege escalation via a crafted HTML page. (Chromium security severity: Medium) Scope: local bookworm: resolved (fixed in 135.0.7049.52-1~deb12u1) bullseye: open forky: resolved (fixed in 135.0.7049.52-1) sid: resolved (fixed in 135.0.704

CVE-2024-0813 [HIGH] CVE-2024-0813: chromium - Use after free in Reading Mode in Google Chrome prior to 121.0.6167.85 allowed a... Use after free in Reading Mode in Google Chrome prior to 121.0.6167.85 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via specific UI interaction. (Chromium security severity: Medium) Scope: local bookworm: resolved (fixed in 121.0.6167.85-1~deb12u1) bullseye: open forky: resolved (fixed in 121.0.6167.

CVE-2025-10201 [HIGH] CVE-2025-10201: chromium - Inappropriate implementation in Mojo in Google Chrome on Android, Linux, ChromeO... Inappropriate implementation in Mojo in Google Chrome on Android, Linux, ChromeOS prior to 140.0.7339.127 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 140.0.7339.127-1~deb12u1) bullseye: open forky: resolved (fixed in 140.0.7339.127-1) sid: resolved (fixed in

CVE-2026-5904 [HIGH] CVE-2026-5904: chromium - Use after free in V8 in Google Chrome prior to 147.0.7727.55 allowed an attacker... Use after free in V8 in Google Chrome prior to 147.0.7727.55 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: Low) Scope: local bookworm: open bullseye: open forky: open sid: resolved (fixed in 147.0.7727.55-1) trixie: open

CVE-2026-3539 [HIGH] CVE-2026-3539: chromium - Object lifecycle issue in DevTools in Google Chrome prior to 145.0.7632.159 allo... Object lifecycle issue in DevTools in Google Chrome prior to 145.0.7632.159 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 145.0.7632.159-1~deb12u1) bullseye: open forky: resolved (fixed in 145.

CVE-2021-21172 [HIGH] CVE-2021-21172: chromium - Insufficient policy enforcement in File System API in Google Chrome on Windows p... Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 89.0.4389.72 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page. Scope: local bookworm: resolved (fixed in 89.0.4389.82-1) bullseye: resolved (fixed in 89.0.4389.82-1) forky: resolved (fixed in 89.0.4389.82-1) sid: resolved (fixed in 89.0.4389.82

CVE-2021-21177 [MEDIUM] CVE-2021-21177: chromium - Insufficient policy enforcement in Autofill in Google Chrome prior to 89.0.4389.... Insufficient policy enforcement in Autofill in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Scope: local bookworm: resolved (fixed in 89.0.4389.82-1) bullseye: resolved (fixed in 89.0.4389.82-1) forky: resolved (fixed in 89.0.4389.82-1) sid: resolved (fixed i

CVE-2025-0611 [HIGH] CVE-2025-0611: chromium - Object corruption in V8 in Google Chrome prior to 132.0.6834.110 allowed a remot... Object corruption in V8 in Google Chrome prior to 132.0.6834.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 132.0.6834.110-1~deb12u1) bullseye: open forky: resolved (fixed in 132.0.6834.110-1) sid: resolved (fixed in 132.0.6834.110-1) trixie: re

CVE-2025-1915 [HIGH] CVE-2025-1915: chromium - Improper Limitation of a Pathname to a Restricted Directory in DevTools in Googl... Improper Limitation of a Pathname to a Restricted Directory in DevTools in Google Chrome on Windows prior to 134.0.6998.35 allowed an attacker who convinced a user to install a malicious extension to bypass file access restrictions via a crafted Chrome Extension. (Chromium security severity: Medium) Scope: local bookworm: resolved (fixed in 134.0.6998.35-1~deb12u1) b

CVE-2026-5907 [HIGH] CVE-2026-5907: chromium - Insufficient data validation in Media in Google Chrome prior to 147.0.7727.55 al... Insufficient data validation in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform an out of bounds memory read via a crafted video file. (Chromium security severity: Low) Scope: local bookworm: open bullseye: open forky: open sid: resolved (fixed in 147.0.7727.55-1) trixie: open