# OPENSUSE-SU-2024:0258-2: chromium security update

OPENSUSE-SU-2024:0258-2, released August 23, 2024, fixes 19 CVEs in chromium (version 128.0.6613.84-bp156.2.17.1). 2 of them are being exploited (CVE-2024-7971); 2 on CISA KEV. Patch Radar priority: Patch now.

- Web page: https://patchblox.com/security/fix/linux/opensuse-su-2024-0258-2
- Platform: Linux
- Released: Aug 23, 2024
- Priority: Patch now (Closes CVE-2024-7971, exploited (CISA KEV))
- CVEs: 19, exploited: 2, on CISA KEV: 2
- Vendor advisory: https://osv.dev/vulnerability/openSUSE-SU-2024:0258-2

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [chromium](https://patchblox.com/security/data/product/linux/chromium.md) | opensuse-leap 15.6 | 128.0.6613.84-bp156.2.17.1 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2024-7971](https://patchblox.com/security/data/cve/CVE-2024-7971.md) | Patch now | Chromium: CVE-2024-7971 Type confusion in V8 | 9.6 | 0.2101 | CISA KEV |
| [CVE-2024-7965](https://patchblox.com/security/data/cve/CVE-2024-7965.md) | Patch now | Chromium: CVE-2024-7965 Inappropriate implementation in V8 | 8.8 | 0.1853 | CISA KEV |
| [CVE-2024-7973](https://patchblox.com/security/data/cve/CVE-2024-7973.md) | High | Chromium: CVE-2024-7973 Heap buffer overflow in PDFium | 8.8 | 0.0077 |  |
| [CVE-2024-7966](https://patchblox.com/security/data/cve/CVE-2024-7966.md) | High | Chromium: CVE-2024-7966 Out of bounds memory access in Skia | 9.6 | 0.0071 |  |
| [CVE-2024-7967](https://patchblox.com/security/data/cve/CVE-2024-7967.md) | High | Chromium: CVE-2024-7967 Heap buffer overflow in Fonts | 8.8 | 0.0061 |  |
| [CVE-2024-7964](https://patchblox.com/security/data/cve/CVE-2024-7964.md) | High | Chromium: CVE-2024-7964 Use after free in Passwords | 8.8 | 0.0060 |  |
| [CVE-2024-7972](https://patchblox.com/security/data/cve/CVE-2024-7972.md) | High | Chromium: CVE-2024-7972 Inappropriate implementation in V8 | 8.8 | 0.0059 |  |
| [CVE-2024-7968](https://patchblox.com/security/data/cve/CVE-2024-7968.md) | High | Chromium: CVE-2024-7968 Use after free in Autofill | 8.8 | 0.0058 |  |
| [CVE-2024-7974](https://patchblox.com/security/data/cve/CVE-2024-7974.md) | High | Chromium: CVE-2024-7974 Insufficient data validation in V8 API | 8.8 | 0.0049 |  |
| [CVE-2024-7977](https://patchblox.com/security/data/cve/CVE-2024-7977.md) | High | Chromium: CVE-2024-7977 Insufficient data validation in Installer | 7.8 | 0.0034 |  |
| [CVE-2024-7980](https://patchblox.com/security/data/cve/CVE-2024-7980.md) | High | Chromium: CVE-2024-7980 Insufficient data validation in Installer | 7.8 | 0.0026 |  |
| [CVE-2024-7979](https://patchblox.com/security/data/cve/CVE-2024-7979.md) | High | Chromium: CVE-2024-7979 Insufficient data validation in Installer | 7.8 | 0.0022 |  |
| [CVE-2024-7976](https://patchblox.com/security/data/cve/CVE-2024-7976.md) | Routine | Chromium: CVE-2024-7976 Inappropriate implementation in FedCM | 4.3 | 0.0046 |  |
| [CVE-2024-7978](https://patchblox.com/security/data/cve/CVE-2024-7978.md) | Routine | Chromium: CVE-2024-7978 Insufficient policy enforcement in Data Transfer | 4.3 | 0.0045 |  |
| [CVE-2024-7975](https://patchblox.com/security/data/cve/CVE-2024-7975.md) | Routine | Chromium: CVE-2024-7975 Inappropriate implementation in Permissions | 4.3 | 0.0044 |  |
| [CVE-2024-7981](https://patchblox.com/security/data/cve/CVE-2024-7981.md) | Routine | Chromium: CVE-2024-7981 Inappropriate implementation in Views | 4.3 | 0.0043 |  |
| [CVE-2024-8034](https://patchblox.com/security/data/cve/CVE-2024-8034.md) | Routine | Chromium: CVE-2024-8034 Inappropriate implementation in Custom Tabs | 4.3 | 0.0042 |  |
| [CVE-2024-8035](https://patchblox.com/security/data/cve/CVE-2024-8035.md) | Routine | Chromium: CVE-2024-8035 Inappropriate implementation in Extensions | 4.3 | 0.0033 |  |
| [CVE-2024-8033](https://patchblox.com/security/data/cve/CVE-2024-8033.md) | Routine | Chromium: CVE-2024-8033 Inappropriate implementation in WebApp Installs | 4.3 | 0.0030 |  |

---

Data as of 2026-11-09T01:18:40Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.