CVE-2024-8638

Type Confusion in V8 in Google Chrome prior to 128.0.6613.137 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. Chromium security severity: High...

CVE-2024-8638

CVE-2024-8638 is a Chrome/Chromium vulnerability affecting Google Chrome/Chromium before 128.0.6613.137, caused by a type confusion in V8 that could allow an attacker to trigger object corruption via a crafted HTML page. The issue has a high impact across confidentiality, integrity, and availabil...

Google Chrome < 128.0.6613.137 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 128.0.6613.137. It is, therefore, affected by multiple vulnerabilities as referenced in the 202409stable-channel-update-for-desktop10 advisory. - Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.137...

Fedora: Security Advisory (FEDORA-2024-ee42af5a22)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Google Chrome < 128.0.6613.138 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 128.0.6613.138. It is, therefore, affected by multiple vulnerabilities as referenced in the 202409stable-channel-update-for-desktop10 advisory. - Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.137...

Google Chrome < 128.0.6613.137 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 128.0.6613.137. It is, therefore, affected by multiple vulnerabilities as referenced in the 202409stable-channel-update-for-desktop10 advisory. - Use after free in Autofill in Google Chrome on Android prior to...

chromium -- multiple security fixes

Chrome Releases reports: This update includes 4 security fixes: 361461526 High CVE-2024-8636: Heap buffer overflow in Skia. Reported by Renan Rios @hyhy100 on 2024-08-22 361784548 High CVE-2024-8637: Use after free in Media Router. Reported by lime@limeSec from TIANGONG Team of Legendsec at...

Stable Channel Update for Desktop

The Stable channel has been updated to 128.0.6613.137/.138 for Windows, Mac and 128.0.6613.137 for Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log. The Extended Stable channel has been updated to 128.0.6613.138 for Windows and Mac...

Fedora: Security Advisory (FEDORA-2024-39b249a59c)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Stable Channel Update for ChromeOS / ChromeOS Flex

Hello All, The Stable channel is being updated to 128.0.6613.133 Platform version: 15964.48.0 for ChromeOS devices and will be rolled out over the next few days. If you find new issues, please let us know one of the following ways: File a bug Visit our Chrome OS communities General: Chromebook He...

Fedora 39 : chromium (2024-1bd7266df0)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-1bd7266df0 advisory. update to 128.0.6613.119 High CVE-2024-8362: Use after free in WebAudio High CVE-2024-7970: Out of bounds write in V8 Tenable has extracted the...

PT-2024-6735 · Google +4 · V8 Javascript Engine +5

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 129.0.6668.58 Microsoft Edge versions affected versions not specified Description: The issue is related to a type confusion error in the V8 JavaScript engine, which can be exploited by a remote attacker using a...

Vulnerability in Tencent WeChat custom browser could lead to remote code execution

Certain versions of WeChat, a popular messaging app created by tech giant Tencent, contain a type confusion vulnerability that could allow an adversary to execute remote code. While this issue, CVE-2023-3420, was disclosed and patched in the V8 engine in June 2023, the WeChat Webview component wa...

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to execute arbitrary code.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to type mixing errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially crafted HTML page from a remote location...

openSUSE 15 Security Update : chromium (openSUSE-SU-2024:0278-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2024:0278-1 advisory. Chromium 128.0.6613.119 released 2024-09-02 boo1230108 CVE-2024-8362: Use after free in WebAudio CVE-2024-7970: Out of bounds write in V8 Tenable...

OPENSUSE-SU-2024:0278-1 Security update for chromium

This update for chromium fixes the following issues: Chromium 128.0.6613.119 released 2024-09-02 boo1230108 CVE-2024-8362: Use after free in WebAudio CVE-2024-7970: Out of bounds write in V8...

SUSE CVE-2024-7970

Out of bounds write in V8 in Google Chrome prior to 128.0.6613.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

Google Chrome Out-of-Bounds Write Vulnerability (CNVD-2024-37813)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from an out-of-bounds write vulnerability that stems from an out-of-bounds issue with the V8 component. An attacker can exploit this vulnerability to execute arbitrary code on the system...

Google Chrome < 128.0.6613.119 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 128.0.6613.119. It is, therefore, affected by multiple vulnerabilities as referenced in the 202409stable-channel-update-for-desktop advisory. - Use after free in WebAudio in Google Chrome prior to 128.0.6613.119 allowed a...

Google Chrome < 128.0.6613.119 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 128.0.6613.119. It is, therefore, affected by multiple vulnerabilities as referenced in the 202409stable-channel-update-for-desktop advisory. - Use after free in WebAudio in Google Chrome prior to 128.0.6613.119 allowed...