Lucene search

K
freebsdFreeBSDE464F777-719E-11EF-8A0F-A8A1599412C6
HistorySep 10, 2024 - 12:00 a.m.

chromium -- multiple security fixes

2024-09-1000:00:00
vuxml.freebsd.org
chromium
security fixes
cve-2024-8636
cve-2024-8637
cve-2024-8638
cve-2024-8639
heap buffer overflow
use after free
type confusion
autofill
skia
media router
v8

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

9.5

Confidence

High

Chrome Releases reports:

This update includes 4 security fixes:

[361461526] High CVE-2024-8636: Heap buffer overflow in Skia. Reported by Renan Rios (@hyhy_100) on 2024-08-22
[361784548] High CVE-2024-8637: Use after free in Media Router. Reported by lime(@limeSec_) from TIANGONG Team of Legendsec at QI-ANXIN Group on 2024-08-23
[362539773] High CVE-2024-8638: Type Confusion in V8. Reported by Zhenghang Xiao (@Kipreyyy) on 2024-08-28
[362658609] High CVE-2024-8639: Use after free in Autofill. Reported by lime(@limeSec_) from TIANGONG Team of Legendsec at QI-ANXIN Group on 2024-08-28

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchchromium< 128.0.6613.137UNKNOWN
FreeBSDanynoarchungoogled-chromium< 128.0.6613.137UNKNOWN

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

9.5

Confidence

High