CVE-2025-4372

Use after free in WebAudio in Google Chrome prior to 136.0.7103.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

CVE-2025-4372: Use After Free

Use after free in WebAudio in Google Chrome prior to 136.0.7103.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

Google Chrome < 136.0.7103.92 Vulnerability

The version of Google Chrome installed on the remote Windows host is prior to 136.0.7103.92. It is, therefore, affected by a vulnerability as referenced in the 202505stable-channel-update-for-desktop advisory. - Use after free in WebAudio in Google Chrome prior to 136.0.7103.92 allowed a remote...

Google Chrome < 136.0.7103.92 Vulnerability

The version of Google Chrome installed on the remote macOS host is prior to 136.0.7103.92. It is, therefore, affected by a vulnerability as referenced in the 202505stable-channel-update-for-desktop advisory. - Use after free in WebAudio in Google Chrome prior to 136.0.7103.92 allowed a remote...

chromium -- multiple security fixes

Chrome Releases reports: This update includes 2 security fixes: 412057896 Medium CVE-2025-4372: Use after free in WebAudio. Reported by Huang Xilin of Ant Group Light-Year Security Lab on 2025-04-20...

PT-2025-19954 · Google +3 · Google Chrome +3

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 136.0.7103.92 Description: A use-after-free issue in WebAudio allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This issue has been classified as medium severity by...

Linux Distros Unpatched Vulnerability : CVE-2024-7536

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in WebAudio in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Astra Linux – Vulnerability in Chromium

The use of after-free in WebAudio in Google Chrome before version 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: High...

CentOS 6 : chromium-browser (RHSA-2020:1350)

The remote CentOS Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:1350 advisory. - Use after free in WebAudio in Google Chrome prior to 80.0.3987.162 allowed a remote attacker to potentially exploit heap corruption via a crafted HTM...

The vulnerability of the WebAudio component in the Google Chrome web browser allows a hacker to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the WebAudio component in the Google Chrome web browser is related to the simultaneous execution using a shared resource with improper synchronization. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause...

Chromium: CVE-2024-8362 Use after free in WebAudio

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Fedora: Security Advisory (FEDORA-2024-ee42af5a22)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 39 : chromium (2024-1bd7266df0)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-1bd7266df0 advisory. update to 128.0.6613.119 High CVE-2024-8362: Use after free in WebAudio High CVE-2024-7970: Out of bounds write in V8 Tenable has extracted the...

OESA-2024-2100 firefox security update

Mozilla Firefox is a standalone web browser, designed for standards compliance and performance. Its functionality can be enhanced via a plethora of extensions. Security Fixes: The WebAudio OscillatorNode object was susceptible to a stack buffer overflow. This could have led to a potentially...

OESA-2024-2098 firefox security update

Mozilla Firefox is a standalone web browser, designed for standards compliance and performance. Its functionality can be enhanced via a plethora of extensions. Security Fixes: The WebAudio OscillatorNode object was susceptible to a stack buffer overflow. This could have led to a potentially...

OESA-2024-2097 firefox security update

Mozilla Firefox is a standalone web browser, designed for standards compliance and performance. Its functionality can be enhanced via a plethora of extensions. Security Fixes: The WebAudio OscillatorNode object was susceptible to a stack buffer overflow. This could have led to a potentially...

openSUSE 15 Security Update : chromium (openSUSE-SU-2024:0278-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2024:0278-1 advisory. Chromium 128.0.6613.119 released 2024-09-02 boo1230108 CVE-2024-8362: Use after free in WebAudio CVE-2024-7970: Out of bounds write in V8 Tenable...

OPENSUSE-SU-2024:0278-1 Security update for chromium

This update for chromium fixes the following issues: Chromium 128.0.6613.119 released 2024-09-02 boo1230108 CVE-2024-8362: Use after free in WebAudio CVE-2024-7970: Out of bounds write in V8...

CVE-2024-8362

Use after free in WebAudio in Google Chrome prior to 128.0.6613.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

Google Chrome memory misreference vulnerability (CNVD-2024-37814)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a memory misreference vulnerability that is caused by a free use in WebAudio. An attacker can exploit this vulnerability to execute arbitrary code on a system...