MGASA-2021-0106: chromium-browser-stable Mageia
CVSS: UnknownPublished
Published 04-03-2021Last modified 16-04-2026
Vulnerability summary
MGASA-2021-0106 is a vulnerability in chromium-browser-stable Mageia with no CVSS score yet.
CVSS score
Not scored
010
No CVSS score recordedEPSS score
Not scored
0%100%
No EPSS score yetKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Timeline
- 04-03-2021PublishedVulnerability first disclosed.
- 16-04-2026Last modifiedVulnerability information updated.
Description
Updated chromium-browser-stable packages fix security vulnerabilities The updated packages fix security vulnerabilities.
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Mageia2 products
- chromium-browser-stable< 88.0.4324.182-1.mga7
- chromium-browser-stable< 88.0.4324.182-1.mga8
1 vendor · 2 products
References
3 linksRelated vulnerabilities
MGASA-2023-0090mageiachromium-browser-stableUpdated chromium-browser-stable packages fix security vulnerability
High CVE-2023-1213: Use after free in Swiftshader. Reported by Jaehun
Jeong(@n3sk) of Theori on 2023-01-30
High CVE-2023-1214: Type Confusion in V8. Reported by Man Yue Mo of GitHub
Security Lab on 2023-02-03
High CVE-2023-1215: Type Confusion in CSS. Reported by Anonymous on
2023-02-17
High CVE-2023-1216: Use after free in DevTools. Reported by Ganjiang
Zhou(@refrain_areu) of ChaMd5-H1 team on 2023-02-21
High CVE-2023-1217: Stack buffer overflow in Crash reporting. Reported by
sunburst of Ant Group Tianqiong Security Lab on 2023-02-03
High CVE-2023-1218: Use after free in WebRTC. Reported by Anonymous on
2023-02-07
High CVE-2023-1219: Heap buffer overflow in Metrics. Reported by Sergei
Glazunov of Google Project Zero on 2023-02-13
High CVE-2023-1220: Heap buffer overflow in UMA. Reported by Sergei
Glazunov of Google Project Zero on 2023-02-17
Medium CVE-2023-1221: Insufficient policy enforcement in Extensions API.
Reported by Ahmed ElMasry on 2022-11-16
Medium CVE-2023-1222: Heap buffer overflow in Web Audio API. Reported by
Cassidy Kim(@cassidy6564) on 2022-12-24
Medium CVE-2023-1223: Insufficient policy enforcement in Autofill.
Reported by Ahmed ElMasry on 2022-12-07
Medium CVE-2023-1224: Insufficient policy enforcement in Web Payments API.
Reported by Thomas Orlita on 2022-12-25
Medium CVE-2023-1225: Insufficient policy enforcement in Navigation.
Reported by Roberto Ffrench-Davis @Lihaft on 2023-01-20
Medium CVE-2023-1226: Insufficient policy enforcement in Web Payments API.
Reported by Anonymous on 2019-10-10
Medium CVE-2023-1227: Use after free in Core. Reported by @ginggilBesel on
2022-07-31
Medium CVE-2023-1228: Insufficient policy enforcement in Intents. Reported
by Axel Chong on 2022-09-18
Medium CVE-2023-1229: Inappropriate implementation in Permission prompts.
Reported by Thomas Orlita on 2020-12-20
Medium CVE-2023-1230: Inappropriate implementation in WebApp Installs.
Reported by Axel Chong on 2022-12-30
Medium CVE-2023-1231: Inappropriate implementation in Autofill. Reported
by Yan Zhu, Brave on 2021-11-30
Low CVE-2023-1232: Insufficient policy enforcement in Resource Timing.
Reported by Sohom Datta on 2022-07-24
Low CVE-2023-1233: Insufficient policy enforcement in Resource Timing.
Reported by Soroush Karami on 2020-01-25
Low CVE-2023-1234: Inappropriate implementation in Intents. Reported by
Axel Chong on 2023-01-03
Low CVE-2023-1235: Type Confusion in DevTools. Reported by raven at
KunLun lab on 2023-01-03
Low CVE-2023-1236: Inappropriate implementation in Internals. Reported by
Alesandro Ortiz on 2022-10-14MGASA-2023-0076mageiachromium-browser-stableUpdated chromium-browser-stable packages fix security vulnerability
Chromium updated Chromium to 110.0.5481.177 to fix vulnerabilities including
[CVE-2023-0927] Use after free in Web Payments API.
[CVE-2023-0928] Use after free in SwiftShader.
[CVE-2023-0929] Use after free in Vulkan.
[CVE-2023-0930] Heap buffer overflow in Video.
[CVE-2023-0931] Use after free in Video.
[CVE-2023-0932] Use after free in WebRTC.
[CVE-2023-0933] Integer overflow in PDF.
[CVE-2023-0941] Use after free in Prompts.MGASA-2023-0044mageiachromium-browser-stableUpdated chromium-browser-stable packages fix security vulnerability
The chromium-browser-stable package has been updated to the 109.0.5414.119
release, fixing 6 vulnerabilities.
Some of the security fixes are:
High CVE-2023-0471: Use after free in WebTransport. Reported by chichoo
Kim(chichoo) and Cassidy Kim(@cassidy6564) on 2022-10-19
High CVE-2023-0472: Use after free in WebRTC. Reported by Cassidy
Kim(@cassidy6564) on 2023-01-06
Medium CVE-2023-0473: Type Confusion in ServiceWorker API. Reported by
raven at KunLun lab on 2023-01-03
Medium CVE-2023-0474: Use after free in GuestView. Reported by avaue at
S.S.L on 2022-12-14MGASA-2023-0016mageiachromium-browser-stableUpdated chromium-browser-stable packages fix security vulnerability
The chromium-browser-stable package has been updated to the 109.0.5414.74
release, fixing 17 vulnerabilities.
Some of the security fixes are -
High CVE-2023-0128 Use after free in Overview Mode. Reported by Khalil
Zhani on 2022-08-16
High CVE-2023-0129 Heap buffer overflow in Network Service. Reported by
asnine on 2022-11-07
Medium CVE-2023-0130 Inappropriate implementation in Fullscreen API.
Reported by Hafiizh on 2022-09-30
Medium CVE-2023-0131 Inappropriate implementation in iframe Sandbox.
Reported by NDevTK on 2022-08-28
Medium CVE-2023-0132 Inappropriate implementation in Permission prompts.
Reported by Jasper Rebane (popstonia) on 2022-10-05
Medium CVE-2023-0133 Inappropriate implementation in Permission prompts.
Reported by Alesandro Ortiz on 2022-10-17
Medium CVE-2023-0134 Use after free in Cart. Reported by Chaoyuan Peng
(@ret2happy) on 2022-11-17
Medium CVE-2023-0135 Use after free in Cart. Reported by Chaoyuan Peng
(@ret2happy) on 2022-11-18
Medium CVE-2023-0136 Inappropriate implementation in Fullscreen API.
Reported by Axel Chong on 2022-08-26
Medium CVE-2023-0137 Heap buffer overflow in Platform Apps. Reported by
avaue and Buff3tts at S.S.L. on 2022-12-10
Low CVE-2023-0138 Heap buffer overflow in libphonenumber. Reported by
Michael Dau on 2022-07-23
Low CVE-2023-0139 Insufficient validation of untrusted input in Downloads.
Reported by Axel Chong on 2022-09-24
Low CVE-2023-0140 Inappropriate implementation in File System API.
Reported by harrison.mitchell, cybercx.com.au on 2022-05-18
Low CVE-2023-0141 Insufficient policy enforcement in CORS. Reported by
scarlet on 2022-09-12MGASA-2022-0480mageiachromium-browser-stableUpdated chromium-browser-stable packages fix security vulnerability
The chromium-browser-stable package has been updated to the 108.0.5359.124
release, fixing 8 vulnerabilities.
Some of the security fixes are ...
High CVE-2022-4436: Use after free in Blink Media. Reported by Anonymous
on 2022-11-15
High CVE-2022-4437: Use after free in Mojo IPC. Reported by
koocola(@alo_cook) and Guang Gong of 360 Vulnerability Research
Institute on 2022-11-30
High CVE-2022-4438: Use after free in Blink Frames. Reported by Anonymous
on 2022-11-07
High CVE-2022-4439: Use after free in Aura. Reported by Anonymous on
2022-11-22
Medium CVE-2022-4440: Use after free in Profiles. Reported by Anonymous on
2022-11-09MGASA-2022-0451mageiachromium-browser-stableUpdated chromium-browser-stable packages fix security vulnerability
The chromium-browser-stable package has been updated to the new 108 branch
with the 108.0.5359.94 release, fixing many bugs and 29 vulnerabilities,
together with 107.0.5304.121 and 108.0.5359.71.
Some of the security fixes are -
CVE-2022-4174: Type Confusion in V8. Reported by Zhenghang Xiao (@Kipreyyy)
on 2022-10-27
CVE-2022-4175: Use after free in Camera Capture. Reported by Leecraso and
Guang Gong of 360 Vulnerability Research Institute on 2022-11-04
CVE-2022-4176: Out of bounds write in Lacros Graphics. Reported by
@ginggilBesel on 2022-09-08
CVE-2022-4177: Use after free in Extensions. Reported by Chaoyuan Peng
(@ret2happy) on 2022-10-28
CVE-2022-4178: Use after free in Mojo. Reported by Sergei Glazunov of
Google Project Zero on 2022-10-18
CVE-2022-4179: Use after free in Audio. Reported by Sergei Glazunov of
Google Project Zero on 2022-10-24
CVE-2022-4180: Use after free in Mojo. Reported by Anonymous on 2022-10-26
CVE-2022-4181: Use after free in Forms. Reported by Aviv A. on 2022-11-09
CVE-2022-4182: Inappropriate implementation in Fenced Frames. Reported by
Peter Nemeth on 2022-09-28
CVE-2022-4183: Insufficient policy enforcement in Popup Blocker. Reported
by David Sievers on 2021-09-22
CVE-2022-4184: Insufficient policy enforcement in Autofill. Reported by
Ahmed ElMasry on 2022-09-01
CVE-2022-4185: Inappropriate implementation in Navigation. Reported by
James Lee (@Windowsrcer) on 2022-10-10
CVE-2022-4186: Insufficient validation of untrusted input in Downloads.
Reported by Luan Herrera (@lbherrera_) on 2022-10-21
CVE-2022-4187: Insufficient policy enforcement in DevTools. Reported by
Axel Chong on 2022-11-04
CVE-2022-4188: Insufficient validation of untrusted input in CORS.
Reported by Philipp Beer (TU Wien) on 2022-06-30
CVE-2022-4189: Insufficient policy enforcement in DevTools. Reported by
NDevTK on 2022-07-15
CVE-2022-4190: Insufficient data validation in Directory. Reported by
Axel Chong on 2022-10-27
CVE-2022-4191: Use after free in Sign-In. Reported by Jaehun Jeong(@n3sk)
of Theori on 2022-10-12
CVE-2022-4192: Use after free in Live Caption. Reported by Samet Bekmezci
@sametbekmezci on 2022-07-14
CVE-2022-4193: Insufficient policy enforcement in File System API.
Reported by Axel Chong on 2022-08-19
CVE-2022-4194: Use after free in Accessibility. Reported by Anonymous on
2022-10-03
CVE-2022-4195: Insufficient policy enforcement in Safe Browsing. Reported
by Eric Lawrence of Microsoft on 2022-10-06
CVE-2022-4135: Heap buffer overflow in GPU. Reported by Clement Lecigne of
Google's Threat Analysis Group on 2022-11-22
CVE-2022-4262: Type Confusion in V8. Reported by Clement Lecigne of
Google's Threat Analysis Group on 2022-11-29
Google is aware that exploits for CVE-2022-4135 and CVE-2022-4262 exist
in the wild.