Chromium: CVE-2024-3156 Inappropriate implementation in V8

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

SUSE CVE-2024-3156

Inappropriate implementation in V8 in Google Chrome prior to 123.0.6312.105 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. Chromium security severity: High...

Debian dsa-5654 : chromium - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5654 advisory. - Inappropriate implementation in V8. CVE-2024-3156 - Use after free in Bookmarks. CVE-2024-3158 - Out of bounds memory access in V8. CVE-2024-3159 Note that Ness...

Fedora 38 : chromium (2024-5e32ce95a3)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-5e32ce95a3 advisory. update to 123.0.6312.105 High CVE-2024-3156: Inappropriate implementation in V8 High CVE-2024-3158: Use after free in Bookmarks High CVE-2024-3159:...

Google Chrome Security Update(stable-channel-update-for-desktop-2024-04) - Windows

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

qt6-webengine -- Multiple vulnerabilities

Qt qtwebengine-chromium repo reports: Backports for 16 security bugs in Chromium: CVE-2024-2625: Object lifecycle issue in V8 CVE-2024-2626: Out of bounds read in Swiftshader CVE-2024-2885: Use after free in Dawn CVE-2024-2887: Type Confusion in WebAssembly CVE-2024-3157: Out of bounds write in...

Google Chrome Security Update(stable-channel-update-for-desktop-2024-04) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

Google Chrome < 123.0.6312.105 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 123.0.6312.105. It is, therefore, affected by multiple vulnerabilities as referenced in the 202404stable-channel-update-for-desktop advisory. - Out of bounds memory access in V8 in Google Chrome prior to 123.0.6312.105...

Google Chrome < 123.0.6312.105 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 123.0.6312.105. It is, therefore, affected by multiple vulnerabilities as referenced in the 202404stable-channel-update-for-desktop advisory. - Out of bounds memory access in V8 in Google Chrome prior to 123.0.6312.105...

Google Chrome Security Update(stable-channel-update-for-desktop-2024-03) - Linux

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

PT-2024-3276

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 123.0.6312.105 Description The issue is related to out of bounds memory access in the V8 engine of Google Chrome, allowing a remote attacker to perform arbitrary read/write via a crafted HTML page. This can lead...

Stable Channel Update for Desktop

The Stable channel has been updated to 123.0.6312.105/.106/.107 for Windows and Mac and 123.0.6312.105 to Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log. Security Fixes and Rewards Note: Access to bug details and links may be kep...

FreeBSD : electron{27,28} -- Object lifecycle issue in V8 (bdcd041e-5811-4da3-9243-573a9890fdb1)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the bdcd041e-5811-4da3-9243-573a9890fdb1 advisory. - Object lifecycle issue in V8 in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to...

ROS-20240329-24

Vulnerability in Google Chrome browser's JavaScript script handler V8 is related to type mixing errors data types. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code...

ROS-20240328-08

A vulnerability in the WebRTC technology of Google Chrome browser is related to the use of memory after its freeing. Exploitation of the vulnerability could allow a remote attacker to execute arbitrary code or cause a denial of service using specially crafted malware. arbitrary code or cause a...

electron{27,28} -- Object lifecycle issue in V8

Electron developers report: This update fixes the following vulnerability: Security: backported fix for CVE-2024-2625...

Chromium: CVE-2024-2625 Object lifecycle issue in V8

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Fedora 39 : chromium (2024-ec79868e3b)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-ec79868e3b advisory. Update to 123.0.6312.58 High CVE-2024-2625: Object lifecycle issue in V8 Medium CVE-2024-2626: Out of bounds read in Swiftshader Medium CVE-2024-262...

Fedora 38 : chromium (2024-01f4c93547)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-01f4c93547 advisory. Update to 123.0.6312.58 High CVE-2024-2625: Object lifecycle issue in V8 Medium CVE-2024-2626: Out of bounds read in Swiftshader Medium CVE-2024-262...

PT-2024-3232 · Google +6 · Google Chrome +7

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 124.0.6367.60 Microsoft Edge affected versions not specified Description: The issue is related to a use-after-free vulnerability in the V8 JavaScript engine, which can be exploited by a remote attacker using a...