Debian Chromium vulnerabilities

CVE-2022-1144 [HIGH] CVE-2022-1144: chromium - Use after free in WebUI in Google Chrome prior to 100.0.4896.60 allowed a remote... Use after free in WebUI in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via specific input into DevTools. Scope: local bookworm: resolved (fixed in 100.0.4896.60-1) bullseye: resolved (fixed in 100.0.4896.60-1~deb11u1) forky: resolved (fixed in 100.0.4

CVE-2022-0469 [HIGH] CVE-2022-0469: chromium - Use after free in Cast in Google Chrome prior to 98.0.4758.80 allowed a remote a... Use after free in Cast in Google Chrome prior to 98.0.4758.80 allowed a remote attacker who convinced a user to engage in specific interactions to potentially exploit heap corruption via a crafted HTML page. Scope: local bookworm: resolved (fixed in 98.0.4758.80-1) bullseye: resolved (fixed in 98.0.4758.80-1~deb11u1) forky: resolved (fixed in 98.0.4758.80-1) sid: res

CVE-2022-0463 [HIGH] CVE-2022-0463: chromium - Use after free in Accessibility in Google Chrome prior to 98.0.4758.80 allowed a... Use after free in Accessibility in Google Chrome prior to 98.0.4758.80 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via user interaction. Scope: local bookworm: resolved (fixed in 98.0.4758.80-1) bullseye: resolved (fixed in 98.0.4758.80-1~deb11u1) forky: resolved (fixed in 98.0.4758.80-1

CVE-2023-2726 [HIGH] CVE-2023-2726: chromium - Inappropriate implementation in WebApp Installs in Google Chrome prior to 113.0.... Inappropriate implementation in WebApp Installs in Google Chrome prior to 113.0.5672.126 allowed an attacker who convinced a user to install a malicious web app to bypass install dialog via a crafted HTML page. (Chromium security severity: Medium) Scope: local bookworm: resolved (fixed in 113.0.5672.126-1) bullseye: resolved (fixed in 113.0.5672.126-1~deb11u1) forky:

CVE-2023-0698 [HIGH] CVE-2023-0698: chromium - Out of bounds read in WebRTC in Google Chrome prior to 110.0.5481.77 allowed a r... Out of bounds read in WebRTC in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 110.0.5481.77-1) bullseye: resolved (fixed in 110.0.5481.77-1~deb11u1) forky: resolved (fixed in 110.0.5481.77-1) sid: resolved (fix

CVE-2022-1136 [HIGH] CVE-2022-1136: chromium - Use after free in Tab Strip in Google Chrome prior to 100.0.4896.60 allowed an a... Use after free in Tab Strip in Google Chrome prior to 100.0.4896.60 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via specific set of user gestures. Scope: local bookworm: resolved (fixed in 100.0.4896.60-1) bullseye: resolved (fixed in 100.0.4896.60-1~deb11u1) forky: resolved (fixed in 100.0.4896.60-

CVE-2022-4191 [HIGH] CVE-2022-4191: chromium - Use after free in Sign-In in Google Chrome prior to 108.0.5359.71 allowed a remo... Use after free in Sign-In in Google Chrome prior to 108.0.5359.71 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via profile destruction. (Chromium security severity: Medium) Scope: local bookworm: resolved (fixed in 108.0.5359.71-1) bullseye: resolved (fixed in 108.0.5359.71-2~deb11u1) forky

CVE-2021-38015 [HIGH] CVE-2021-38015: chromium - Inappropriate implementation in input in Google Chrome prior to 96.0.4664.45 all... Inappropriate implementation in input in Google Chrome prior to 96.0.4664.45 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension. Scope: local bookworm: resolved (fixed in 97.0.4692.71-0.1) bullseye: resolved (fixed in 97.0.4692.71-0.1~deb11u1) forky: resolved (fixed in 97.0.4692

CVE-2022-0605 [HIGH] CVE-2022-0605: chromium - Use after free in Webstore API in Google Chrome prior to 98.0.4758.102 allowed a... Use after free in Webstore API in Google Chrome prior to 98.0.4758.102 allowed an attacker who convinced a user to install a malicious extension and convinced a user to enage in specific user interaction to potentially exploit heap corruption via a crafted HTML page. Scope: local bookworm: resolved (fixed in 98.0.4758.102-1) bullseye: resolved (fixed in 98.0.4758.102

CVE-2022-3655 [HIGH] CVE-2022-3655: chromium - Heap buffer overflow in Media Galleries in Google Chrome prior to 107.0.5304.62 ... Heap buffer overflow in Media Galleries in Google Chrome prior to 107.0.5304.62 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) Scope: local bookworm: resolved (fixed in 107.0.5304.68-1) bullseye: resolved (fixed in 107.0.5304.68-1~deb11u1) f

CVE-2023-0137 [HIGH] CVE-2023-0137: chromium - Heap buffer overflow in Platform Apps in Google Chrome on Chrome OS prior to 109... Heap buffer overflow in Platform Apps in Google Chrome on Chrome OS prior to 109.0.5414.74 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) Scope: local bookworm: resolved (fixed in 109.0.5414.74-1) bullseye: resolved (fixed in 109.0.5414.74-2

CVE-2022-4177 [HIGH] CVE-2022-4177: chromium - Use after free in Extensions in Google Chrome prior to 108.0.5359.71 allowed an ... Use after free in Extensions in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install an extension to potentially exploit heap corruption via a crafted Chrome Extension and UI interaction. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 108.0.5359.71-1) bullseye: resolved (fixed in 108.0.5359.71-2~deb11u

CVE-2022-3657 [HIGH] CVE-2022-3657: chromium - Use after free in Extensions in Google Chrome prior to 107.0.5304.62 allowed an ... Use after free in Extensions in Google Chrome prior to 107.0.5304.62 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: Medium) Scope: local bookworm: resolved (fixed in 107.0.5304.68-1) bullseye: resolved (fixed in 107.0.5304.68-1~deb11u1) forky

CVE-2023-0134 [HIGH] CVE-2023-0134: chromium - Use after free in Cart in Google Chrome prior to 109.0.5414.74 allowed an attack... Use after free in Cart in Google Chrome prior to 109.0.5414.74 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via database corruption and a crafted HTML page. (Chromium security severity: Medium) Scope: local bookworm: resolved (fixed in 109.0.5414.74-1) bullseye: resolved (fixed in 109.0.5414.74-2~deb

CVE-2023-0135 [HIGH] CVE-2023-0135: chromium - Use after free in Cart in Google Chrome prior to 109.0.5414.74 allowed an attack... Use after free in Cart in Google Chrome prior to 109.0.5414.74 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via database corruption and a crafted HTML page. (Chromium security severity: Medium) Scope: local bookworm: resolved (fixed in 109.0.5414.74-1) bullseye: resolved (fixed in 109.0.5414.74-2~deb

CVE-2022-3449 [HIGH] CVE-2022-3449: chromium - Use after free in Safe Browsing in Google Chrome prior to 106.0.5249.119 allowed... Use after free in Safe Browsing in Google Chrome prior to 106.0.5249.119 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 106.0.5249.119-1) bullseye: resolved (fixed in 106.0.5249.119-1~deb11u1) f

CVE-2022-2617 [HIGH] CVE-2022-2617: chromium - Use after free in Extensions API in Google Chrome prior to 104.0.5112.79 allowed... Use after free in Extensions API in Google Chrome prior to 104.0.5112.79 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via specific UI interactions. Scope: local bookworm: resolved (fixed in 104.0.5112.79-1) bullseye: resolved (fixed in 104.0.5112.79-1~deb11u1) forky: resolved (fixed in 104.0.5112.79-

CVE-2019-5755 [HIGH] CVE-2019-5755: chromium - Incorrect handling of negative zero in V8 in Google Chrome prior to 72.0.3626.81... Incorrect handling of negative zero in V8 in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. Scope: local bookworm: resolved (fixed in 72.0.3626.81-1) bullseye: resolved (fixed in 72.0.3626.81-1) forky: resolved (fixed in 72.0.3626.81-1) sid: resolved (fixed in 72.0.3626.81-1) trixie: resolved (fi

CVE-2022-0114 [HIGH] CVE-2022-0114: chromium - Out of bounds memory access in Blink Serial API in Google Chrome prior to 97.0.4... Out of bounds memory access in Blink Serial API in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page and virtual serial port driver. Scope: local bookworm: resolved (fixed in 97.0.4692.71-0.1) bullseye: resolved (fixed in 97.0.4692.71-0.1~deb11u1) forky: resolved (fixed in 97.0.4692.71-0.1) s

CVE-2023-4761 [HIGH] CVE-2023-4761: chromium - Out of bounds memory access in FedCM in Google Chrome prior to 116.0.5845.179 al... Out of bounds memory access in FedCM in Google Chrome prior to 116.0.5845.179 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 116.0.5845.180-1~deb12u1) bullseye: resolved (fixed in 116.0.5845.180-1~deb11u1) f