CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 0CVE-2024-1675 – Debian Security Advisory 5629-1
https://notcve.org/view.php?id=CVE-2024-1675
21 Feb 2024 — Insufficient policy enforcement in Download in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page. (Chromium security severity: Medium) La aplicación insuficiente de políticas en Descargas en Google Chrome anteriores a 122.0.6261.57 permitió a un atacante remoto eludir las restricciones del sistema de archivos a través de una página HTML manipulada. (Severidad de seguridad de Chromium: media) Multiple security issues were discovered in Ch... • https://chromereleases.googleblog.com/2024/02/stable-channel-update-for-desktop_20.html • CWE-284: Improper Access Control •
CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 0CVE-2024-1674 – Debian Security Advisory 5629-1
https://notcve.org/view.php?id=CVE-2024-1674
21 Feb 2024 — Inappropriate implementation in Navigation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium) La implementación inadecuada en Navegación en Google Chrome anterior a 122.0.6261.57 permitió a un atacante remoto eludir las restricciones de navegación a través de una página HTML manipulada. (Severidad de seguridad de Chromium: media) Multiple security issues were discovered in Chromium, which could res... • https://chromereleases.googleblog.com/2024/02/stable-channel-update-for-desktop_20.html •
CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 0CVE-2024-1673 – Debian Security Advisory 5629-1
https://notcve.org/view.php?id=CVE-2024-1673
21 Feb 2024 — Use after free in Accessibility in Google Chrome prior to 122.0.6261.57 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via specific UI gestures. (Chromium security severity: Medium) Use after free en Accesibilidad en Google Chrome anterior a 122.0.6261.57 permitía a un atacante remoto que había comprometido el proceso de renderizado explotar potencialmente la corrupción del montón a través de gestos de interfaz de usuario específicos. (Severidad de ... • https://chromereleases.googleblog.com/2024/02/stable-channel-update-for-desktop_20.html • CWE-416: Use After Free •
CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 0CVE-2024-1672 – Debian Security Advisory 5629-1
https://notcve.org/view.php?id=CVE-2024-1672
21 Feb 2024 — Inappropriate implementation in Content Security Policy in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Medium) La implementación inadecuada de la Política de seguridad de contenido en Google Chrome anterior a 122.0.6261.57 permitió a un atacante remoto eludir la política de seguridad de contenido a través de una página HTML manipulada. (Severidad de seguridad de Chromium: media) Multiple security issue... • https://chromereleases.googleblog.com/2024/02/stable-channel-update-for-desktop_20.html • CWE-474: Use of Function with Inconsistent Implementations •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2024-1671 – Debian Security Advisory 5629-1
https://notcve.org/view.php?id=CVE-2024-1671
21 Feb 2024 — Inappropriate implementation in Site Isolation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Medium) La implementación inadecuada de Site Isolation en Google Chrome anterior a 122.0.6261.57 permitió a un atacante remoto eludir la política de seguridad de contenido a través de una página HTML manipulada. (Severidad de seguridad de Chromium: media) Multiple security issues were discovered in Chromium, w... • https://chromereleases.googleblog.com/2024/02/stable-channel-update-for-desktop_20.html • CWE-693: Protection Mechanism Failure •
CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 0CVE-2024-1670 – Debian Security Advisory 5629-1
https://notcve.org/view.php?id=CVE-2024-1670
21 Feb 2024 — Use after free in Mojo in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Use after free en Mojo en Google Chrome anterior a 122.0.6261.57 permitía a un atacante remoto explotar potencialmente la corrupción del montón a través de una página HTML manipulada. (Severidad de seguridad de Chrome: alta) Multiple security issues were discovered in Chromium, which could result in the execution of arbitr... • https://chromereleases.googleblog.com/2024/02/stable-channel-update-for-desktop_20.html • CWE-416: Use After Free •
CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 0CVE-2024-1669 – Debian Security Advisory 5629-1
https://notcve.org/view.php?id=CVE-2024-1669
21 Feb 2024 — Out of bounds memory access in Blink in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High) El acceso a la memoria fuera de los límites en Blink en Google Chrome anterior a 122.0.6261.57 permitía a un atacante remoto realizar un acceso a la memoria fuera de los límites a través de una página HTML manipulada. (Severidad de seguridad de Chrome: alta) Multiple security issues were discovered in Chromiu... • https://chromereleases.googleblog.com/2024/02/stable-channel-update-for-desktop_20.html • CWE-125: Out-of-bounds Read •
CVSS: 10.0EPSS: 2%CPEs: 3EXPL: 0CVE-2024-1283 – Debian Security Advisory 5617-1
https://notcve.org/view.php?id=CVE-2024-1283
06 Feb 2024 — Heap buffer overflow in Skia in Google Chrome prior to 121.0.6167.160 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) El desbordamiento de búfer de almacenamiento dinámico en Skia en Google Chrome anterior a 121.0.6167.160 permitía a un atacante remoto explotar potencialmente la corrupción el almacenamiento dinámico a través de una página HTML manipulada. (Severidad de seguridad de Chrome: alta) Multiple vulnerabilities have been d... • https://chromereleases.googleblog.com/2024/02/stable-channel-update-for-desktop.html • CWE-787: Out-of-bounds Write •
CVSS: 10.0EPSS: 0%CPEs: 3EXPL: 0CVE-2024-1284 – Debian Security Advisory 5617-1
https://notcve.org/view.php?id=CVE-2024-1284
06 Feb 2024 — Use after free in Mojo in Google Chrome prior to 121.0.6167.160 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Use after free en Mojo en Google Chrome anterior a 121.0.6167.160 permitía a un atacante remoto explotar potencialmente la corrupción del almacenamiento dinámico a través de una página HTML manipulada. (Severidad de seguridad de Chrome: alta) Multiple vulnerabilities have been discovered in QtWebEngine, the worst of which... • https://chromereleases.googleblog.com/2024/02/stable-channel-update-for-desktop.html • CWE-416: Use After Free •
CVSS: 10.0EPSS: 0%CPEs: 3EXPL: 0CVE-2024-1077 – Gentoo Linux Security Advisory 202405-14
https://notcve.org/view.php?id=CVE-2024-1077
30 Jan 2024 — Use after free in Network in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to potentially exploit heap corruption via a malicious file. (Chromium security severity: High) El use after free en Network de Google Chrome anterior a 121.0.6167.139 permitía a un atacante remoto explotar potencialmente la corrupción del montón a través de un archivo malicioso. (Severidad de seguridad de Chromium: alta) Multiple vulnerabilities have been discovered in Chromium and its derivatives, the worst of whi... • https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop_30.html • CWE-416: Use After Free •