Linux · 
openSUSE Leap · Security advisory · August 23, 2024
openSUSE Leap · Security advisory · August 23, 2024OPENSUSE-SU-2024:0258-2: chromium security update
OPENSUSE-SU-2024:0258-2, released August 23, 2024, fixes 19 CVEs in chromium (version 128.0.6613.84-bp156.2.17.1). 2 of them are being exploited (CVE-2024-7971); 2 on CISA KEV. Patch Radar priority: Patch now.
Patch now2 on CISA KEV
CVEs closed
19
1 rated Critical
Exploited
2
CVE-2024-7971
Highest CVSS
9.6
Base score, 0 to 10
Highest EPSS
0.2101
97th percentile
Priority of the 19 CVEs
Patch now 2
Urgent 0
High 10
Routine 7
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| chromium | opensuse-leap 15.6 | 128.0.6613.84-bp156.2.17.1 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Patch now | CVE-2024-7971 | Chromium: CVE-2024-7971 Type confusion in V8 | 9.6 | 0.2101 | KEVExploited |
| Patch now | CVE-2024-7965 | Chromium: CVE-2024-7965 Inappropriate implementation in V8 | 8.8 | 0.1853 | KEVExploited |
| High | CVE-2024-7973 | Chromium: CVE-2024-7973 Heap buffer overflow in PDFium | 8.8 | 0.0077 | None reported |
| High | CVE-2024-7966 | Chromium: CVE-2024-7966 Out of bounds memory access in Skia | 9.6 | 0.0071 | None reported |
| High | CVE-2024-7967 | Chromium: CVE-2024-7967 Heap buffer overflow in Fonts | 8.8 | 0.0061 | None reported |
| High | CVE-2024-7964 | Chromium: CVE-2024-7964 Use after free in Passwords | 8.8 | 0.0060 | None reported |
| High | CVE-2024-7972 | Chromium: CVE-2024-7972 Inappropriate implementation in V8 | 8.8 | 0.0059 | None reported |
| High | CVE-2024-7968 | Chromium: CVE-2024-7968 Use after free in Autofill | 8.8 | 0.0058 | None reported |
| High | CVE-2024-7974 | Chromium: CVE-2024-7974 Insufficient data validation in V8 API | 8.8 | 0.0049 | None reported |
| High | CVE-2024-7977 | Chromium: CVE-2024-7977 Insufficient data validation in Installer | 7.8 | 0.0034 | None reported |
| High | CVE-2024-7980 | Chromium: CVE-2024-7980 Insufficient data validation in Installer | 7.8 | 0.0026 | None reported |
| High | CVE-2024-7979 | Chromium: CVE-2024-7979 Insufficient data validation in Installer | 7.8 | 0.0022 | None reported |
| Routine | CVE-2024-7976 | Chromium: CVE-2024-7976 Inappropriate implementation in FedCM | 4.3 | 0.0046 | None reported |
| Routine | CVE-2024-7978 | Chromium: CVE-2024-7978 Insufficient policy enforcement in Data Transfer | 4.3 | 0.0045 | None reported |
| Routine | CVE-2024-7975 | Chromium: CVE-2024-7975 Inappropriate implementation in Permissions | 4.3 | 0.0044 | None reported |
| Routine | CVE-2024-7981 | Chromium: CVE-2024-7981 Inappropriate implementation in Views | 4.3 | 0.0043 | None reported |
| Routine | CVE-2024-8034 | Chromium: CVE-2024-8034 Inappropriate implementation in Custom Tabs | 4.3 | 0.0042 | None reported |
| Routine | CVE-2024-8035 | Chromium: CVE-2024-8035 Inappropriate implementation in Extensions | 4.3 | 0.0033 | None reported |
| Routine | CVE-2024-8033 | Chromium: CVE-2024-8033 Inappropriate implementation in WebApp Installs | 4.3 | 0.0030 | None reported |
Showing 1 to 19 of 19
1
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.