CVSS: 10.0EPSS: 27%CPEs: 1EXPL: 1CVE-2024-1939 – Debian Security Advisory 5634-1
https://notcve.org/view.php?id=CVE-2024-1939
29 Feb 2024 — Type Confusion in V8 in Google Chrome prior to 122.0.6261.94 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Type Confusion en V8 en Google Chrome anterior a 122.0.6261.94 permitía a un atacante remoto explotar potencialmente la corrupción del montón a través de una página HTML manipulada. (Severidad de seguridad de Chrome: alta) Multiple security issues were discovered in Chromium, which could result in the execution of arbitrary ... • https://github.com/rycbar77/CVE-2024-1939 • CWE-843: Access of Resource Using Incompatible Type ('Type Confusion') •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 0CVE-2024-1676 – Debian Security Advisory 5629-1
https://notcve.org/view.php?id=CVE-2024-1676
21 Feb 2024 — Inappropriate implementation in Navigation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to spoof security UI via a crafted HTML page. (Chromium security severity: Low) La implementación inadecuada en la navegación en Google Chrome anterior a 122.0.6261.57 permitió a un atacante remoto falsificar la interfaz de usuario de seguridad a través de una página HTML manipulada. (Severidad de seguridad de Chrome: baja) Multiple security issues were discovered in Chromium, which could result in t... • https://chromereleases.googleblog.com/2024/02/stable-channel-update-for-desktop_20.html • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 0CVE-2024-1675 – Debian Security Advisory 5629-1
https://notcve.org/view.php?id=CVE-2024-1675
21 Feb 2024 — Insufficient policy enforcement in Download in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page. (Chromium security severity: Medium) La aplicación insuficiente de políticas en Descargas en Google Chrome anteriores a 122.0.6261.57 permitió a un atacante remoto eludir las restricciones del sistema de archivos a través de una página HTML manipulada. (Severidad de seguridad de Chromium: media) Multiple security issues were discovered in Ch... • https://chromereleases.googleblog.com/2024/02/stable-channel-update-for-desktop_20.html • CWE-284: Improper Access Control •
CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 0CVE-2024-1674 – Debian Security Advisory 5629-1
https://notcve.org/view.php?id=CVE-2024-1674
21 Feb 2024 — Inappropriate implementation in Navigation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium) La implementación inadecuada en Navegación en Google Chrome anterior a 122.0.6261.57 permitió a un atacante remoto eludir las restricciones de navegación a través de una página HTML manipulada. (Severidad de seguridad de Chromium: media) Multiple security issues were discovered in Chromium, which could res... • https://chromereleases.googleblog.com/2024/02/stable-channel-update-for-desktop_20.html •
CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 0CVE-2024-1673 – Debian Security Advisory 5629-1
https://notcve.org/view.php?id=CVE-2024-1673
21 Feb 2024 — Use after free in Accessibility in Google Chrome prior to 122.0.6261.57 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via specific UI gestures. (Chromium security severity: Medium) Use after free en Accesibilidad en Google Chrome anterior a 122.0.6261.57 permitía a un atacante remoto que había comprometido el proceso de renderizado explotar potencialmente la corrupción del montón a través de gestos de interfaz de usuario específicos. (Severidad de ... • https://chromereleases.googleblog.com/2024/02/stable-channel-update-for-desktop_20.html • CWE-416: Use After Free •
CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 0CVE-2024-1672 – Debian Security Advisory 5629-1
https://notcve.org/view.php?id=CVE-2024-1672
21 Feb 2024 — Inappropriate implementation in Content Security Policy in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Medium) La implementación inadecuada de la Política de seguridad de contenido en Google Chrome anterior a 122.0.6261.57 permitió a un atacante remoto eludir la política de seguridad de contenido a través de una página HTML manipulada. (Severidad de seguridad de Chromium: media) Multiple security issue... • https://chromereleases.googleblog.com/2024/02/stable-channel-update-for-desktop_20.html • CWE-474: Use of Function with Inconsistent Implementations •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2024-1671 – Debian Security Advisory 5629-1
https://notcve.org/view.php?id=CVE-2024-1671
21 Feb 2024 — Inappropriate implementation in Site Isolation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Medium) La implementación inadecuada de Site Isolation en Google Chrome anterior a 122.0.6261.57 permitió a un atacante remoto eludir la política de seguridad de contenido a través de una página HTML manipulada. (Severidad de seguridad de Chromium: media) Multiple security issues were discovered in Chromium, w... • https://chromereleases.googleblog.com/2024/02/stable-channel-update-for-desktop_20.html • CWE-693: Protection Mechanism Failure •
CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 0CVE-2024-1670 – Debian Security Advisory 5629-1
https://notcve.org/view.php?id=CVE-2024-1670
21 Feb 2024 — Use after free in Mojo in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Use after free en Mojo en Google Chrome anterior a 122.0.6261.57 permitía a un atacante remoto explotar potencialmente la corrupción del montón a través de una página HTML manipulada. (Severidad de seguridad de Chrome: alta) Multiple security issues were discovered in Chromium, which could result in the execution of arbitr... • https://chromereleases.googleblog.com/2024/02/stable-channel-update-for-desktop_20.html • CWE-416: Use After Free •
CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 0CVE-2024-1669 – Debian Security Advisory 5629-1
https://notcve.org/view.php?id=CVE-2024-1669
21 Feb 2024 — Out of bounds memory access in Blink in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High) El acceso a la memoria fuera de los límites en Blink en Google Chrome anterior a 122.0.6261.57 permitía a un atacante remoto realizar un acceso a la memoria fuera de los límites a través de una página HTML manipulada. (Severidad de seguridad de Chrome: alta) Multiple security issues were discovered in Chromiu... • https://chromereleases.googleblog.com/2024/02/stable-channel-update-for-desktop_20.html • CWE-125: Out-of-bounds Read •
CVSS: 10.0EPSS: 2%CPEs: 3EXPL: 0CVE-2024-1283 – Debian Security Advisory 5617-1
https://notcve.org/view.php?id=CVE-2024-1283
06 Feb 2024 — Heap buffer overflow in Skia in Google Chrome prior to 121.0.6167.160 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) El desbordamiento de búfer de almacenamiento dinámico en Skia en Google Chrome anterior a 121.0.6167.160 permitía a un atacante remoto explotar potencialmente la corrupción el almacenamiento dinámico a través de una página HTML manipulada. (Severidad de seguridad de Chrome: alta) Multiple vulnerabilities have been d... • https://chromereleases.googleblog.com/2024/02/stable-channel-update-for-desktop.html • CWE-787: Out-of-bounds Write •