Lucene search

FreeBSD6F2545BB-65E8-11EF-8A0F-A8A1599412C6

HistoryAug 28, 2024 - 12:00 a.m.

chromium -- multiple security fixes

2024-08-2800:00:00

vuxml.freebsd.org

chromium

security fixes

update

type confusion

heap buffer overflow

skia

cve-2024-7969

cve-2024-8193

cve-2024-8194

cve-2024-8198

chrome releases

unix

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.6

Confidence

High

EPSS

0.001

Percentile

26.9%

JSON

Chrome Releases reports:

This update includes 4 security fixes:

[351865302] High CVE-2024-7969: Type Confusion in V8. Reported by CFF of Topsec Alpha Team on 2024-07-09
[360265320] High CVE-2024-8193: Heap buffer overflow in Skia. Reported by Renan Rios (@hyhy_100) on 2024-08-16
[360533914] High CVE-2024-8194: Type Confusion in V8. Reported by Seunghyun Lee (@0x10n) on 2024-08-18
[360758697] High CVE-2024-8198: Heap buffer overflow in Skia. Reported by Renan Rios (@hyhy_100) on 2024-08-19

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchchromium< 128.0.6613.113UNKNOWN
FreeBSDanynoarchungoogled-chromium< 128.0.6613.113UNKNOWN

OS	Version	Architecture	Package	Version	Filename
FreeBSD	any	noarch	chromium	< 128.0.6613.113	UNKNOWN
FreeBSD	any	noarch	ungoogled-chromium	< 128.0.6613.113	UNKNOWN

References

chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop_28.html

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.6

Confidence

High

EPSS

0.001

Percentile

26.9%

JSON

Related for 6F2545BB-65E8-11EF-8A0F-A8A1599412C6