Microsoft Edge (Chromium-Based) Multiple Vulnerabilities - May24

Microsoft Edge Chromium-Based is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Google Chrome < 124.0.6367.201 Vulnerability

The version of Google Chrome installed on the remote Windows host is prior to 124.0.6367.201. It is, therefore, affected by a vulnerability as referenced in the 202405stable-channel-update-for-desktop9 advisory. - Use after free in Visuals in Google Chrome prior to 124.0.6367.201 allowed a remote...

PT-2024-4242 · Google +6 · Google Chrome +6

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 126.0.6478.54 Microsoft Edge affected versions not specified Description: The issue is related to a use after free in the Dawn component, which can be exploited by a remote attacker using a crafted HTML page to...

VulnCheck KEV: CVE-2024-4947

Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to execute code via a crafted HTML page...

PT-2024-3931 · Google +6 · Google Chrome +6

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 125.0.6422.141 Microsoft Edge affected versions not specified Description: The issue is related to an out of bounds write in the Streams API, which can be exploited by a remote attacker to execute arbitrary cod...

CVE-2024-4671

Use after free in Visuals in Google Chrome prior to 124.0.6367.201 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

SUSE CVE-2024-4558

Use after free in ANGLE in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

PT-2024-3929 · Google +6 · Google Chrome +6

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 125.0.6422.141 Microsoft Edge affected versions not specified Description: The issue is related to a use after free vulnerability in the Presentation API of Google Chrome and Microsoft Edge browsers. This...

CVE-2024-4559

Heap buffer overflow in WebAudio in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2024-4558

Use after free in ANGLE in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2024-4558

Use after free in ANGLE in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2024-4559

CVE-2024-4559 is a heap buffer overflow in WebAudio used by Google Chrome before version 124.0.6367.155. Multiple connected sources (Debian DSA-5683-1, CNVD-2024-36094, GLSA entries, Astra Linux security bulletin) corroborate this vulnerability in Chromium-based Chrome/WebAudio. Impact is describ...

CVE-2024-4558

CVE-2024-4558: Use-after-free in ANGLE within Google Chrome/Chromium's WebKit/ANGLE path allows a remote attacker to potentially trigger heap corruption via a crafted HTML page. Affects Chrome/Chromium builds prior to version 124.0.6367.155. The issue is addressed in the referenced Chrome update;...

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to execute arbitrary code.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created HTML page...

VulnCheck KEV: CVE-2020-15994

Use after free in V8 in Google Chrome prior to 86.0.4240.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

VulnCheck KEV: CVE-2021-30538

Insufficient policy enforcement in content security policy in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to bypass content security policy via a crafted HTML page...

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to execute arbitrary code.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to improper security checks for standard elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created HTML page...

Fedora 39 : chromium (2024-5483bc2adb)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-5483bc2adb advisory. update to 124.0.6367.118 High CVE-2024-4331: Use after free in Picture In Picture High CVE-2024-4368: Use after free in Dawn Tenable has extracted t...

Microsoft Edge (Chromium) < 124.0.2478.80 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 124.0.2478.80. It is, therefore, affected by multiple vulnerabilities as referenced in the May 2, 2024 advisory. - Use after free in Picture In Picture in Google Chrome prior to 124.0.6367.118 allowed a remote attacker...

Fedora 40 : chromium (2024-5cf9499b62)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-5cf9499b62 advisory. update to 124.0.6367.118 High CVE-2024-4331: Use after free in Picture In Picture High CVE-2024-4368: Use after free in Dawn ---- update to...