CVE-2024-9960

CVE-2024-9960 corresponds to a use-after-free in Dawn within Google Chrome/Chromium prior to version 130.0.6723.58, which can allow remote heap corruption via a crafted HTML page. Multiple connected sources confirm the flaw in Chromium’s Dawn component and reference the same fixed version 130.0.6...

Google Chrome < 130.0.6723.58 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 130.0.6723.58. It is, therefore, affected by multiple vulnerabilities as referenced in the 202410stable-channel-update-for-desktop15 advisory. - Use after free in AI. CVE-2024-9954 - Use after free in Web Authentication...

chromium -- multiple security fixes

Chrome Releases reports: This update includes 17 security fixes: 367755363 High CVE-2024-9954: Use after free in AI. Reported by DarkNavy on 2024-09-18 370133761 Medium CVE-2024-9955: Use after free in Web Authentication. Reported by anonymous on 2024-09-29 370482421 Medium CVE-2024-9956:...

openSUSE 15 Security Update : chromium (openSUSE-SU-2024:0320-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2024:0320-1 advisory. Chromium 129.0.6668.70 stable released 2024-09-24 boo1230964 CVE-2024-9120: Use after free in Dawn CVE-2024-9121: Inappropriate implementation in...

OPENSUSE-SU-2024:0320-1 Security update for chromium

This update for chromium fixes the following issues: Chromium 129.0.6668.70 stable released 2024-09-24 boo1230964 CVE-2024-9120: Use after free in Dawn CVE-2024-9121: Inappropriate implementation in V8 CVE-2024-9122: Type Confusion in V8 CVE-2024-9123: Integer overflow in Skia...

The vulnerability of the Dawn component in the Google Chrome browser allows a hacker to execute arbitrary code.

The vulnerability of the Dawn component in the Google Chrome browser allows for the use of memory after it is freed. Exploiting this vulnerability could enable a malicious actor to execute arbitrary code using a specially created HTML page from a remote location...

openSUSE 15 Security Update : chromium (openSUSE-SU-2024:0314-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2024:0314-1 advisory. Chromium 129.0.6668.70 stable released 2024-09-24 boo1230964 CVE-2024-9120: Use after free in Dawn CVE-2024-9121: Inappropriate implementation in...

Chromium: CVE-2024-9120 Use after free in Dawn

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

SUSE CVE-2024-9120

Use after free in Dawn in Google Chrome on Windows prior to 129.0.6668.70 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2024-9120

Use after free in Dawn in Google Chrome on Windows prior to 129.0.6668.70 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2024-9120

Use after free in Dawn in Google Chrome on Windows prior to 129.0.6668.70 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2024-9120

CVE-2024-9120 is a use-after-free in Dawn within Chromium-based Chrome on Windows, enabling potential heap corruption via a crafted HTML page. Affected software is Google Chrome/Chromium with Dawn integration; the issue has a CVSS v3.1 base score of 8.8 (HIGH) with network attack vector, no privi...

Google Chrome < 129.0.6668.70 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 129.0.6668.70. It is, therefore, affected by multiple vulnerabilities as referenced in the 202409stable-channel-update-for-desktop24 advisory. - Integer overflow in Skia in Google Chrome prior to 129.0.6668.70 allowed a...

Google Chrome < 129.0.6668.70 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 129.0.6668.70. It is, therefore, affected by multiple vulnerabilities as referenced in the 202409stable-channel-update-for-desktop24 advisory. - Integer overflow in Skia in Google Chrome prior to 129.0.6668.70 allowed a...

PT-2024-6481 · Google +1 · Google Chrome +1

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 129.0.6668.70 Description: The issue is related to a use after free vulnerability in the Dawn component of Google Chrome, which could allow a remote attacker to potentially exploit heap corruption via a crafted...

Fedora: Security Advisory (FEDORA-2024-fe9a675a37)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OPENSUSE-SU-2024:0254-2 Security update for chromium, gn, rust-bindgen

This update for chromium, gn, rust-bindgen fixes the following issues: - Chromium 127.0.6533.119 boo1228941 CVE-2024-7532: Out of bounds memory access in ANGLE CVE-2024-7533: Use after free in Sharing CVE-2024-7550: Type Confusion in V8 CVE-2024-7534: Heap buffer overflow in Layout CVE-2024-7535:...

The vulnerability of the Dawn component in browsers such as Google Chrome and Microsoft Edge on Android operating systems allows a hacker to bypass the sandbox protection mechanisms and execute arbitrary code.

The vulnerability of the Dawn component in Google Chrome and Microsoft Edge browsers on Android operating systems is related to the use of uninitialized variables. Exploiting this vulnerability allows a malicious actor to bypass the sandboxing mechanisms and execute arbitrary code using a special...

The vulnerability of the Dawn component in browsers Google Chrome and Microsoft Edge on Android operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Dawn component in Google Chrome and Microsoft Edge browsers on Android operating systems is related to insufficient verification of data authenticity. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created HTML page from...

SUSE CVE-2024-6991

Use after free in Dawn in Google Chrome prior to 127.0.6533.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...