Linux · openSUSE Leap · Security advisory · July 18, 2024

OPENSUSE-SU-2024:0204-1: chromium security update

OPENSUSE-SU-2024:0204-1, released July 18, 2024, fixes 26 CVEs in chromium (version 126.0.6478.126-bp156.2.6.1). None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
26
None rated Critical
Exploited
0
None reported
Highest CVSS
8.8
Base score, 0 to 10
Highest EPSS
0.0495
92nd percentile

Priority of the 26 CVEs

Patch now 0 Urgent 0 High 23 Routine 3

Fixed package versions

ProductReleaseFixed in
chromiumopensuse-leap 15.6126.0.6478.126-bp156.2.6.1

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2024-5841 Chromium: CVE-2024-5841 Use after free in V88.8 0.0495 None reported
High CVE-2024-6100 Chromium: CVE-2024-6100 Type Confusion in V88.8 0.0115 None reported
High CVE-2024-5830 Chromium: CVE-2024-5830 Type Confusion in V88.8 0.0094 None reported
High CVE-2024-6101 Chromium: CVE-2024-6101: Inappropriate implementation in WebAssembly8.8 0.0082 None reported
High CVE-2024-6102 Chromium: CVE-2024-6102: Out of bounds memory access in Dawn8.8 0.0069 None reported
High CVE-2024-6291 Chromium: CVE-2024-6291 Use after free in Swiftshader8.8 0.0066 None reported
High CVE-2024-6103 Chromium: CVE-2024-6103: Use after free in Dawn8.8 0.0064 None reported
High CVE-2024-6290 Chromium: CVE-2024-6290 Use after free in Dawn8.8 0.0061 None reported
High CVE-2024-6292 Chromium: CVE-2024-6292 Use after free in Dawn8.8 0.0061 None reported
High CVE-2024-6293 Chromium: CVE-2024-6293 Use after free in Dawn8.8 0.0061 None reported
High CVE-2024-5834 Chromium: CVE-2024-5834 Inappropriate implementation in Dawn8.8 0.0057 None reported
High CVE-2024-5844 Chromium: CVE-2024-5844 Heap buffer overflow in Tab Strip8.8 0.0054 None reported
High CVE-2024-5837 Chromium: CVE-2024-5837 Type Confusion in V88.8 0.0053 None reported
High CVE-2024-5833 Chromium: CVE-2024-5833 Type Confusion in V88.8 0.0052 None reported
High CVE-2024-5838 Chromium: CVE-2024-5838 Type Confusion in V88.8 0.0052 None reported
High CVE-2024-5835 Chromium: CVE-2024-5835 Heap buffer overflow in Tab Groups8.8 0.0052 None reported
High CVE-2024-5836 Chromium: CVE-2024-5836 Inappropriate Implementation in DevTools8.8 0.0050 None reported
High CVE-2024-5842 Chromium: CVE-2024-5842 Use after free in Browser UI8.8 0.0048 None reported
High CVE-2024-5831 Chromium: CVE-2024-5831 Use after free in Dawn8.8 0.0048 None reported
High CVE-2024-5832 Chromium: CVE-2024-5832 Use after free in Dawn8.8 0.0048 None reported
High CVE-2024-5846 Chromium: CVE-2024-5846 Use after free in PDFium8.8 0.0047 None reported
High CVE-2024-5847 Chromium: CVE-2024-5847 Use after free in PDFium8.8 0.0047 None reported
High CVE-2024-5845 Chromium: CVE-2024-5845 Use after free in Audio8.8 0.0046 None reported
Routine CVE-2024-5839 Chromium: CVE-2024-5839 Inappropriate Implementation in Memory Allocator6.5 0.0049 None reported
Routine CVE-2024-5843 Chromium: CVE-2024-5843 Inappropriate implementation in Downloads6.5 0.0047 None reported
Showing 1 to 25 of 26 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.