Search for packages
Package details: pkg:deb/debian/chromium@112.0.5615.138-1~deb11u1
purl pkg:deb/debian/chromium@112.0.5615.138-1~deb11u1
Tags Ghost
Next non-vulnerable version 137.0.7151.119-1
Latest non-vulnerable version 137.0.7151.119-1
Risk 10.0
Vulnerabilities affecting this package (15)
Vulnerability Summary Fixed by
VCID-16k2-22t3-aaam
Aliases:
CVE-2023-3216
Type confusion in V8 in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
114.0.5735.198-1~deb12u1
Affected by 37 other vulnerabilities.
116.0.5845.180-1~deb11u1
Affected by 0 other vulnerabilities.
120.0.6099.224-1~deb11u1
Affected by 309 other vulnerabilities.
VCID-1qzp-8tr9-aaaf
Aliases:
CVE-2023-3215
Use after free in WebRTC in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
114.0.5735.198-1~deb12u1
Affected by 37 other vulnerabilities.
116.0.5845.180-1~deb11u1
Affected by 0 other vulnerabilities.
120.0.6099.224-1~deb11u1
Affected by 309 other vulnerabilities.
VCID-3bx1-jvmj-aaac
Aliases:
CVE-2023-4362
Heap buffer overflow in Mojom IDL in Google Chrome prior to 116.0.5845.96 allowed a remote attacker who had compromised the renderer process and gained control of a WebUI process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
116.0.5845.140-1
Affected by 0 other vulnerabilities.
116.0.5845.180-1~deb11u1
Affected by 0 other vulnerabilities.
120.0.6099.224-1~deb11u1
Affected by 309 other vulnerabilities.
VCID-3gz4-ye2e-aaak
Aliases:
CVE-2023-3217
Use after free in WebXR in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
114.0.5735.198-1~deb12u1
Affected by 37 other vulnerabilities.
116.0.5845.180-1~deb11u1
Affected by 0 other vulnerabilities.
120.0.6099.224-1~deb11u1
Affected by 309 other vulnerabilities.
VCID-4eme-z1zh-aaaf
Aliases:
CVE-2023-4427
Out of bounds memory access in V8 in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High)
116.0.5845.140-1
Affected by 0 other vulnerabilities.
116.0.5845.180-1~deb11u1
Affected by 0 other vulnerabilities.
120.0.6099.224-1~deb11u1
Affected by 309 other vulnerabilities.
VCID-5w8w-wbpc-aaad
Aliases:
CVE-2023-4360
Inappropriate implementation in Color in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to obfuscate security UI via a crafted HTML page. (Chromium security severity: Medium)
116.0.5845.140-1
Affected by 0 other vulnerabilities.
116.0.5845.180-1~deb11u1
Affected by 0 other vulnerabilities.
120.0.6099.224-1~deb11u1
Affected by 309 other vulnerabilities.
VCID-7sb7-26pu-aaac
Aliases:
CVE-2023-2932
Use after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: High)
114.0.5735.198-1~deb12u1
Affected by 37 other vulnerabilities.
116.0.5845.180-1~deb11u1
Affected by 0 other vulnerabilities.
120.0.6099.224-1~deb11u1
Affected by 309 other vulnerabilities.
VCID-a5gw-4dam-aaap
Aliases:
CVE-2023-4429
Use after free in Loader in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
116.0.5845.140-1
Affected by 0 other vulnerabilities.
116.0.5845.180-1~deb11u1
Affected by 0 other vulnerabilities.
120.0.6099.224-1~deb11u1
Affected by 309 other vulnerabilities.
VCID-bbcb-egu5-aaab
Aliases:
CVE-2023-2937
Inappropriate implementation in Picture In Picture in Google Chrome prior to 114.0.5735.90 allowed a remote attacker who had compromised the renderer process to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Medium)
114.0.5735.198-1~deb12u1
Affected by 37 other vulnerabilities.
116.0.5845.180-1~deb11u1
Affected by 0 other vulnerabilities.
120.0.6099.224-1~deb11u1
Affected by 309 other vulnerabilities.
VCID-bbqg-34ek-aaad
Aliases:
CVE-2023-2933
Use after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: High)
114.0.5735.198-1~deb12u1
Affected by 37 other vulnerabilities.
116.0.5845.180-1~deb11u1
Affected by 0 other vulnerabilities.
120.0.6099.224-1~deb11u1
Affected by 309 other vulnerabilities.
VCID-cb8t-bc3x-aaas
Aliases:
CVE-2023-2938
Inappropriate implementation in Picture In Picture in Google Chrome prior to 114.0.5735.90 allowed a remote attacker who had compromised the renderer process to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Medium)
114.0.5735.198-1~deb12u1
Affected by 37 other vulnerabilities.
116.0.5845.180-1~deb11u1
Affected by 0 other vulnerabilities.
120.0.6099.224-1~deb11u1
Affected by 309 other vulnerabilities.
VCID-m7sb-4ecm-aaad
Aliases:
CVE-2023-4071
Heap buffer overflow in Visuals in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
116.0.5845.140-1
Affected by 0 other vulnerabilities.
116.0.5845.180-1~deb11u1
Affected by 0 other vulnerabilities.
120.0.6099.224-1~deb11u1
Affected by 309 other vulnerabilities.
VCID-qykv-qwc3-aaan
Aliases:
CVE-2023-4069
Type Confusion in V8 in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
116.0.5845.140-1
Affected by 0 other vulnerabilities.
116.0.5845.180-1~deb11u1
Affected by 0 other vulnerabilities.
120.0.6099.224-1~deb11u1
Affected by 309 other vulnerabilities.
VCID-sc7v-xqdy-aaam
Aliases:
CVE-2023-4428
Out of bounds memory access in CSS in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High)
116.0.5845.140-1
Affected by 0 other vulnerabilities.
116.0.5845.180-1~deb11u1
Affected by 0 other vulnerabilities.
120.0.6099.224-1~deb11u1
Affected by 309 other vulnerabilities.
VCID-vtkr-tkz1-aaas
Aliases:
CVE-2023-2931
Use after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: High)
114.0.5735.198-1~deb12u1
Affected by 37 other vulnerabilities.
116.0.5845.180-1~deb11u1
Affected by 0 other vulnerabilities.
120.0.6099.224-1~deb11u1
Affected by 309 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version