OPENSUSE-SU-2024:0020-1: chromium&distro=openSUSE Leap 15.5
Vulnerability summary
OPENSUSE-SU-2024:0020-1 is a vulnerability in chromium&distro=openSUSE Leap 15.5 with no CVSS score yet.
Advisory lineage
Upstream 17 · Downstream 0 · Related 17Timeline
- 16-01-2024PublishedVulnerability first disclosed.
- 04-02-2026Last modifiedVulnerability information updated.
Description
Security update for chromium This update for chromium fixes the following issues: - Chromium 120.0.6099.216 (boo#1217839, boo#1218048, boo#1218302, boo#1218533, boo#1218719) * CVE-2024-0333: Insufficient data validation in Extensions * CVE-2024-0222: Use after free in ANGLE * CVE-2024-0223: Heap buffer overflow in ANGLE * CVE-2024-0224: Use after free in WebAudio * CVE-2024-0225: Use after free in WebGPU * CVE-2023-7024: Heap buffer overflow in WebRTC * CVE-2023-6702: Type Confusion in V8 * CVE-2023-6703: Use after free in Blink * CVE-2023-6704: Use after free in libavif (boo#1218303) * CVE-2023-6705: Use after free in WebRTC * CVE-2023-6706: Use after free in FedCM * CVE-2023-6707: Use after free in CSS * CVE-2023-6508: Use after free in Media Stream * CVE-2023-6509: Use after free in Side Panel Search * CVE-2023-6510: Use after free in Media Capture * CVE-2023-6511: Inappropriate implementation in Autofill * CVE-2023-6512: Inappropriate implementation in Web Browser UI
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Opensuse1 product
- chromium&distro=openSUSE Leap 15.5< 120.0.6099.216-bp155.2.64.1
Suse1 product
- chromium&distro=SUSE Package Hub 15 SP5< 120.0.6099.216-bp155.2.64.1
2 vendors · 2 products
References
24 links- lists.opensuse.org/archives/…Advisory