Search for packages
| purl | pkg:deb/debian/chromium@130.0.6723.116-1 |
| Tags | Ghost |
| Next non-vulnerable version | 137.0.7151.119-1 |
| Latest non-vulnerable version | 137.0.7151.119-1 |
| Risk | 4.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-1z63-cr4f-x7es
Aliases: CVE-2024-11111 |
Inappropriate implementation in Autofill in Google Chrome prior to 131.0.6778.69 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 8 other vulnerabilities. Affected by 10 other vulnerabilities. |
|
VCID-8wqm-cvyn-eqce
Aliases: CVE-2024-11116 |
Inappropriate implementation in Blink in Google Chrome prior to 131.0.6778.69 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 8 other vulnerabilities. Affected by 10 other vulnerabilities. |
|
VCID-hzmn-ycb4-t3as
Aliases: CVE-2024-11110 |
Inappropriate implementation in Extensions in Google Chrome prior to 131.0.6778.69 allowed a remote attacker to bypass site isolation via a crafted Chrome Extension. (Chromium security severity: High) |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 8 other vulnerabilities. Affected by 10 other vulnerabilities. |
|
VCID-nebm-jxcv-hkgx
Aliases: CVE-2024-11114 |
Inappropriate implementation in Views in Google Chrome on Windows prior to 131.0.6778.69 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 8 other vulnerabilities. Affected by 10 other vulnerabilities. |
|
VCID-nmq5-mtkw-vycm
Aliases: CVE-2024-11113 |
Use after free in Accessibility in Google Chrome prior to 131.0.6778.69 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 8 other vulnerabilities. Affected by 10 other vulnerabilities. |
|
VCID-t573-cv92-fkca
Aliases: CVE-2024-11115 |
Insufficient policy enforcement in Navigation in Google Chrome on iOS prior to 131.0.6778.69 allowed a remote attacker to perform privilege escalation via a series of UI gestures. (Chromium security severity: Medium) |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 8 other vulnerabilities. Affected by 10 other vulnerabilities. |
|
VCID-w8j4-zrs1-cuda
Aliases: CVE-2024-11395 |
Type Confusion in V8 in Google Chrome prior to 131.0.6778.85 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 8 other vulnerabilities. Affected by 10 other vulnerabilities. |
|
VCID-xh8e-fn64-wqdc
Aliases: CVE-2024-11112 |
Use after free in Media in Google Chrome on Windows prior to 131.0.6778.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 8 other vulnerabilities. Affected by 10 other vulnerabilities. |
|
VCID-znwn-8463-p3et
Aliases: CVE-2024-11117 |
Inappropriate implementation in FileSystem in Google Chrome prior to 131.0.6778.69 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page. (Chromium security severity: Low) |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 8 other vulnerabilities. Affected by 10 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2024-11-24T06:42:53.246397+00:00 | Debian Importer | Affected by | VCID-w8j4-zrs1-cuda | https://security-tracker.debian.org/tracker/data/json | 35.0.0 |
| 2024-11-24T06:42:50.419607+00:00 | Debian Importer | Affected by | VCID-znwn-8463-p3et | https://security-tracker.debian.org/tracker/data/json | 35.0.0 |
| 2024-11-24T06:42:49.661351+00:00 | Debian Importer | Affected by | VCID-8wqm-cvyn-eqce | https://security-tracker.debian.org/tracker/data/json | 35.0.0 |
| 2024-11-24T06:42:48.955463+00:00 | Debian Importer | Affected by | VCID-t573-cv92-fkca | https://security-tracker.debian.org/tracker/data/json | 35.0.0 |
| 2024-11-24T06:42:48.253407+00:00 | Debian Importer | Affected by | VCID-nebm-jxcv-hkgx | https://security-tracker.debian.org/tracker/data/json | 35.0.0 |
| 2024-11-24T06:42:47.544790+00:00 | Debian Importer | Affected by | VCID-nmq5-mtkw-vycm | https://security-tracker.debian.org/tracker/data/json | 35.0.0 |
| 2024-11-24T06:42:46.845482+00:00 | Debian Importer | Affected by | VCID-xh8e-fn64-wqdc | https://security-tracker.debian.org/tracker/data/json | 35.0.0 |
| 2024-11-24T06:42:46.137353+00:00 | Debian Importer | Affected by | VCID-1z63-cr4f-x7es | https://security-tracker.debian.org/tracker/data/json | 35.0.0 |
| 2024-11-24T06:42:45.425811+00:00 | Debian Importer | Affected by | VCID-hzmn-ycb4-t3as | https://security-tracker.debian.org/tracker/data/json | 35.0.0 |