Google Chrome Chrome vulnerabilities

CVE-2024-0809 [LOW] Stable Channel Update for ChromeOS / ChromeOS Flex: CVE-2024-0809 Stable Channel Update for ChromeOS / ChromeOS Flex CVE-2024-0809: Inappropriate implementation in Autofill. Reported by Ahmed ElMasry on 2023-10-31 Users who are pinned to a specific release of ChromeOS will not receive these security fixes or any other security fixes Severity: low

CVE-2023-21216 [CRITICAL] Long Term Support Channel Update for ChromeOS: CVE-2023-21216 Long Term Support Channel Update for ChromeOS CVE-2023-21216

CVE-2023-21215 [CRITICAL] Long Term Support Channel Update for ChromeOS: CVE-2023-21215 Long Term Support Channel Update for ChromeOS CVE-2023-21215

CVE-2023-21228 [CRITICAL] Long Term Support Channel Update for ChromeOS: CVE-2023-21228 Long Term Support Channel Update for ChromeOS CVE-2023-21228

CVE-2023-21164 [CRITICAL] Long Term Support Channel Update for ChromeOS: CVE-2023-21164 Long Term Support Channel Update for ChromeOS CVE-2023-21164

CVE-2023-21217 [CRITICAL] Long Term Support Channel Update for ChromeOS: CVE-2023-21217 Long Term Support Channel Update for ChromeOS CVE-2023-21217

CVE-2023-21163 [CRITICAL] Long Term Support Channel Update for ChromeOS: CVE-2023-21163 Long Term Support Channel Update for ChromeOS CVE-2023-21163

CVE-2023-21218 [CRITICAL] Long Term Support Channel Update for ChromeOS: CVE-2023-21218 Long Term Support Channel Update for ChromeOS CVE-2023-21218

CVE-2023-21162 [CRITICAL] Long Term Support Channel Update for ChromeOS: CVE-2023-21162 Long Term Support Channel Update for ChromeOS CVE-2023-21162

CVE-2023-21402 [CRITICAL] Long Term Support Channel Update for ChromeOS: CVE-2023-21402 Long Term Support Channel Update for ChromeOS CVE-2023-21402

CVE-2023-21166 [CRITICAL] Long Term Support Channel Update for ChromeOS: CVE-2023-21166 Long Term Support Channel Update for ChromeOS CVE-2023-21166

CVE-2023-6509 [HIGH] Long Term Support Channel Update for ChromeOS: CVE-2023-6509 Long Term Support Channel Update for ChromeOS CVE-2023-6509

CVE-2024-0333 [MEDIUM] Long Term Support Channel Update for ChromeOS: CVE-2024-0333 Long Term Support Channel Update for ChromeOS CVE-2024-0333

CVE-2024-1077 [HIGH] Stable Channel Update for Desktop: CVE-2024-1077 Stable Channel Update for Desktop CVE-2024-1077: Use after free in Network. Reported by Giulio Candreva with Microsoft Browser Security on 2023-12-12 [$5000][ 1511567 ] High CVE-2024-1060: Use after free in Canvas Reported by Anonymous on 2023-12-14 [$3000][ 1514777 ] High CVE-2024-1059: Use after free in WebRTC Severity: high

CVE-2024-3169 [HIGH] Stable Channel Update for Desktop: CVE-2024-3169 Stable Channel Update for Desktop CVE-2024-3169: Use after free in V8. Reported by johnshoop on 2024-01-14 [N/A][ 1511085 ] High CVE-2024-1077: Use after free in Network Reported by Microsoft Security Research Center on 2023-12-13 [$8000][ 41491373 ] Medium CVE-2024-2884: Out of bounds read in V8 Severity: high

CVE-2024-3170 [HIGH] Stable Channel Update for Desktop: CVE-2024-3170 Stable Channel Update for Desktop CVE-2024-3170: Use after free in WebRTC. Reported by Anonymous on 2024-01-05 [$11000][ 1505080 ] High CVE-2024-0807: Use after free in WebAudio Reported by Huang Xilin of Ant Group Light-Year Security Lab on 2023-11-25 [$9000][ 1484394 ] High CVE-2024-0812: Inappropriate implementation in Accessibility Severity: high

CVE-2024-0814 [MEDIUM] Stable Channel Update for Desktop: CVE-2024-0814 Stable Channel Update for Desktop CVE-2024-0814: Incorrect security UI in Payments. Reported by Muneaki Nishimura (nishimunea) on 2023-07-11 [$1000][ 1477151 ] Medium CVE-2024-0813: Use after free in Reading Mode Reported by @retsew0x01 on 2023-08-30 [$1000][ 1505176 ] Medium CVE-2024-0806: Use after free in Passwords Severity: medium

CVE-2024-0805 [MEDIUM] Stable Channel Update for Desktop: CVE-2024-0805 Stable Channel Update for Desktop CVE-2024-0805: Inappropriate implementation in Downloads. Reported by Om Apip on 2024-01-01 [TBD][ 1515137 ] Medium CVE-2024-0804: Insufficient policy enforcement in iOS Security UI Reported by Narendra Bhati of Suma Soft Pvt Severity: medium

CVE-2024-0811 [LOW] Stable Channel Update for Desktop: CVE-2024-0811 Stable Channel Update for Desktop CVE-2024-0811: Inappropriate implementation in Extensions API. Reported by Jann Horn of Google Project Zero on 2023-10-21 [TBD][ 1497985 ] Low CVE-2024-0809: Inappropriate implementation in Autofill Reported by Ahmed ElMasry on 2023-10-31 We would also like to thank all security researchers that worked with us during the development cycle to prevent security bugs from ever reaching the stable c

CVE-2023-6706 [HIGH] Long Term Support Channel Update for ChromeOS: CVE-2023-6706 Long Term Support Channel Update for ChromeOS CVE-2023-6706