Search

Find a vulnerability

Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

    Related vulnerabilities

    CERTFR-2024-AVI-0622

    Vulnerability from certfr_avis - Published: - Updated:

    De multiples vulnérabilités ont été découvertes dans Google Chrome. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.

    Solutions

    Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

    Impacted products
    Vendor Product Description
    Google Chrome Chrome versions antérieures à 127.0.6533.72 sur Linux
    Google Chrome Chrome versions antérieures à 127.0.6533.72/73 sur Windows et Mac
    References
    Bulletin de sécurité Google Chrome 2024-07-23 vendor-advisory

    Show details on source website
    To clipboard 

    {
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Chrome versions ant\u00e9rieures \u00e0 127.0.6533.72 sur Linux",
      "product": {
        "name": "Chrome",
        "vendor": {
          "name": "Google",
          "scada": false
        }
      }
    },
    {
      "description": "Chrome versions ant\u00e9rieures \u00e0 127.0.6533.72/73 sur Windows et Mac",
      "product": {
        "name": "Chrome",
        "vendor": {
          "name": "Google",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2024-7000",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-7000"
    },
    {
      "name": "CVE-2024-6989",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6989"
    },
    {
      "name": "CVE-2024-6992",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6992"
    },
    {
      "name": "CVE-2024-6997",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6997"
    },
    {
      "name": "CVE-2024-6995",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6995"
    },
    {
      "name": "CVE-2024-7005",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-7005"
    },
    {
      "name": "CVE-2024-7004",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-7004"
    },
    {
      "name": "CVE-2024-6999",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6999"
    },
    {
      "name": "CVE-2024-6988",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6988"
    },
    {
      "name": "CVE-2024-7001",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-7001"
    },
    {
      "name": "CVE-2024-6996",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6996"
    },
    {
      "name": "CVE-2024-6994",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6994"
    },
    {
      "name": "CVE-2024-6993",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6993"
    },
    {
      "name": "CVE-2024-7003",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-7003"
    },
    {
      "name": "CVE-2024-6998",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6998"
    },
    {
      "name": "CVE-2024-6991",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6991"
    }
  ],
  "links": [],
  "reference": "CERTFR-2024-AVI-0622",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2024-07-24T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Google Chrome. Elles permettent \u00e0 un attaquant de provoquer un probl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Google Chrome",
  "vendor_advisories": [
    {
      "published_at": "2024-07-23",
      "title": "Bulletin de s\u00e9curit\u00e9 Google Chrome",
      "url": "https://chromereleases.googleblog.com/2024/07/stable-channel-update-for-desktop_23.html"
    }
  ]
}

    CERTFR-2024-AVI-0628

    Vulnerability from certfr_avis - Published: - Updated:

    De multiples vulnérabilités ont été découvertes dans Microsoft Edge. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une atteinte à la confidentialité des données et un problème de sécurité non spécifié par l'éditeur.

    Solutions

    Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

    Impacted products
    Vendor Product Description
    Microsoft Edge Microsoft Edge versions antérieures à 127.0.2651.74
    References

    Show details on source website
    To clipboard 

    {
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Microsoft Edge versions ant\u00e9rieures \u00e0 127.0.2651.74",
      "product": {
        "name": "Edge",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2024-7000",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-7000"
    },
    {
      "name": "CVE-2024-6989",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6989"
    },
    {
      "name": "CVE-2024-6992",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6992"
    },
    {
      "name": "CVE-2024-6997",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6997"
    },
    {
      "name": "CVE-2024-6995",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6995"
    },
    {
      "name": "CVE-2024-7005",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-7005"
    },
    {
      "name": "CVE-2024-7004",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-7004"
    },
    {
      "name": "CVE-2024-6999",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6999"
    },
    {
      "name": "CVE-2024-6988",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6988"
    },
    {
      "name": "CVE-2024-7001",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-7001"
    },
    {
      "name": "CVE-2024-6996",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6996"
    },
    {
      "name": "CVE-2024-6994",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6994"
    },
    {
      "name": "CVE-2024-6993",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6993"
    },
    {
      "name": "CVE-2024-7003",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-7003"
    },
    {
      "name": "CVE-2024-6998",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6998"
    },
    {
      "name": "CVE-2024-39379",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-39379"
    },
    {
      "name": "CVE-2024-6991",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6991"
    },
    {
      "name": "CVE-2024-38103",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-38103"
    }
  ],
  "links": [],
  "reference": "CERTFR-2024-AVI-0628",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2024-07-26T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Microsoft Edge. Elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et un probl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Microsoft Edge",
  "vendor_advisories": [
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-6993",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-6993"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-7000",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-7000"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-6994",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-6994"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-7001",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-7001"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-39379",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-39379"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-7003",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-7003"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-6996",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-6996"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-6992",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-6992"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-7005",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-7005"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-38103",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38103"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-6997",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-6997"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-6988",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-6988"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-6995",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-6995"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-6991",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-6991"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-6989",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-6989"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-6998",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-6998"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-6999",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-6999"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-7004",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-7004"
    }
  ]
}

    CERTFR-2024-AVI-0622

    Vulnerability from certfr_avis - Published: - Updated:

    De multiples vulnérabilités ont été découvertes dans Google Chrome. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.

    Solutions

    Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

    Impacted products
    Vendor Product Description
    Google Chrome Chrome versions antérieures à 127.0.6533.72 sur Linux
    Google Chrome Chrome versions antérieures à 127.0.6533.72/73 sur Windows et Mac
    References
    Bulletin de sécurité Google Chrome 2024-07-23 vendor-advisory

    Show details on source website
    To clipboard 

    {
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Chrome versions ant\u00e9rieures \u00e0 127.0.6533.72 sur Linux",
      "product": {
        "name": "Chrome",
        "vendor": {
          "name": "Google",
          "scada": false
        }
      }
    },
    {
      "description": "Chrome versions ant\u00e9rieures \u00e0 127.0.6533.72/73 sur Windows et Mac",
      "product": {
        "name": "Chrome",
        "vendor": {
          "name": "Google",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2024-7000",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-7000"
    },
    {
      "name": "CVE-2024-6989",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6989"
    },
    {
      "name": "CVE-2024-6992",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6992"
    },
    {
      "name": "CVE-2024-6997",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6997"
    },
    {
      "name": "CVE-2024-6995",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6995"
    },
    {
      "name": "CVE-2024-7005",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-7005"
    },
    {
      "name": "CVE-2024-7004",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-7004"
    },
    {
      "name": "CVE-2024-6999",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6999"
    },
    {
      "name": "CVE-2024-6988",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6988"
    },
    {
      "name": "CVE-2024-7001",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-7001"
    },
    {
      "name": "CVE-2024-6996",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6996"
    },
    {
      "name": "CVE-2024-6994",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6994"
    },
    {
      "name": "CVE-2024-6993",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6993"
    },
    {
      "name": "CVE-2024-7003",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-7003"
    },
    {
      "name": "CVE-2024-6998",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6998"
    },
    {
      "name": "CVE-2024-6991",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6991"
    }
  ],
  "links": [],
  "reference": "CERTFR-2024-AVI-0622",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2024-07-24T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Google Chrome. Elles permettent \u00e0 un attaquant de provoquer un probl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Google Chrome",
  "vendor_advisories": [
    {
      "published_at": "2024-07-23",
      "title": "Bulletin de s\u00e9curit\u00e9 Google Chrome",
      "url": "https://chromereleases.googleblog.com/2024/07/stable-channel-update-for-desktop_23.html"
    }
  ]
}

    CERTFR-2024-AVI-0628

    Vulnerability from certfr_avis - Published: - Updated:

    De multiples vulnérabilités ont été découvertes dans Microsoft Edge. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une atteinte à la confidentialité des données et un problème de sécurité non spécifié par l'éditeur.

    Solutions

    Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

    Impacted products
    Vendor Product Description
    Microsoft Edge Microsoft Edge versions antérieures à 127.0.2651.74
    References

    Show details on source website
    To clipboard 

    {
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Microsoft Edge versions ant\u00e9rieures \u00e0 127.0.2651.74",
      "product": {
        "name": "Edge",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2024-7000",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-7000"
    },
    {
      "name": "CVE-2024-6989",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6989"
    },
    {
      "name": "CVE-2024-6992",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6992"
    },
    {
      "name": "CVE-2024-6997",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6997"
    },
    {
      "name": "CVE-2024-6995",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6995"
    },
    {
      "name": "CVE-2024-7005",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-7005"
    },
    {
      "name": "CVE-2024-7004",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-7004"
    },
    {
      "name": "CVE-2024-6999",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6999"
    },
    {
      "name": "CVE-2024-6988",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6988"
    },
    {
      "name": "CVE-2024-7001",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-7001"
    },
    {
      "name": "CVE-2024-6996",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6996"
    },
    {
      "name": "CVE-2024-6994",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6994"
    },
    {
      "name": "CVE-2024-6993",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6993"
    },
    {
      "name": "CVE-2024-7003",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-7003"
    },
    {
      "name": "CVE-2024-6998",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6998"
    },
    {
      "name": "CVE-2024-39379",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-39379"
    },
    {
      "name": "CVE-2024-6991",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6991"
    },
    {
      "name": "CVE-2024-38103",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-38103"
    }
  ],
  "links": [],
  "reference": "CERTFR-2024-AVI-0628",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2024-07-26T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Microsoft Edge. Elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et un probl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Microsoft Edge",
  "vendor_advisories": [
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-6993",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-6993"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-7000",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-7000"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-6994",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-6994"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-7001",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-7001"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-39379",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-39379"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-7003",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-7003"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-6996",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-6996"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-6992",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-6992"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-7005",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-7005"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-38103",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38103"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-6997",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-6997"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-6988",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-6988"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-6995",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-6995"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-6991",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-6991"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-6989",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-6989"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-6998",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-6998"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-6999",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-6999"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-7004",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-7004"
    }
  ]
}

    BDU:2024-05896 (CVE-2024-6992)

    Vulnerability from fstec – Published: 2024-07-31 – Updated: 2026-01-20 – View on bdu.fstec.ru Fixed
    VLAI
    Title
    Уязвимость библиотеки ANGLE браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю выполнить произвольный код
    Summary
    Уязвимость библиотеки ANGLE браузеров Google Chrome и Microsoft Edge связана с чтением данных за границами буфера в памяти. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольный код
    Severity
    10.0 (High) CVSS 2.0
    AV:N/AC:L/Au:N/C:C/I:C/A:C
    8.8 (High) CVSS 3.0
    CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    Class
    Code vulnerability
    Status
    Confirmed by the vendor
    Exploitation
    Data structure manipulation
    Incidents
    Being clarified
    Remediation
    Software update
    CWE
    • CWE-125 - Чтение за границами буфера
    Aliases
    CVE-2024-6992
    References
    Impacted products
    Vendors
    ООО «Ред Софт», ООО «РусБИТех-Астра», Microsoft Corp, Google Inc, АО «НППКТ»
    Products
    РЕД ОС (запись в едином реестре российских программ №3751), Astra Linux Common Edition (запись в едином реестре российских программ №4433), Microsoft Edge, Google Chrome, ОСОН ОСнова Оnyx (запись в едином реестре российских программ №5913)
    Versions
    7.3 (РЕД ОС), 1.6 «Смоленск» (Astra Linux Common Edition), до 127.0.2651.74 (Microsoft Edge), до 127.0.6533.72 (Google Chrome), до 127.0.6533.73 (Google Chrome), до 2.12 (ОСОН ОСнова Оnyx)
    Product types
    Operating system, Application software
    Platforms
    Сообщество свободного программного обеспечения Linux -, Microsoft Corp Windows -, Apple Inc. MacOS -, ООО «Ред Софт» РЕД ОС 7.3 (запись в едином реестре российских программ №3751), ООО «РусБИТех-Астра» Astra Linux Common Edition 1.6 «Смоленск» (запись в едином реестре российских программ №4433), АО «НППКТ» ОСОН ОСнова Оnyx до 2.12 (запись в едином реестре российских программ №5913)
    Mitigations
    Использование рекомендаций: Для Google Chrome: https://chromereleases.googleblog.com/2024/07/stable-channel-update-for-desktop_23.html Для Microsoft Edge: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-6992 Для РедОС: http://repo.red-soft.ru/redos/7.3c/x86_64/updates/ Обновление программного обеспечения chromium до версии 131.0.6778.264+repack-1~deb12u1.osnova2u1 Для ОС Astra Linux: обновить пакет chromium до 1:142.0.7444.175-0astragost0+ci1 или более высокой версии, используя рекомендации производителя: https://wiki.astralinux.ru/astra-linux-se16-bulletin-20251225SE16
    Remediation
    TO1456 Обновление Microsoft Edge
    To clipboard 

    {
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
  "CVSS 3.0": "AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "TO1456",
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": "TO1456 \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Microsoft Edge ",
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u041e\u041e\u041e \u00ab\u0420\u0435\u0434 \u0421\u043e\u0444\u0442\u00bb, \u041e\u041e\u041e \u00ab\u0420\u0443\u0441\u0411\u0418\u0422\u0435\u0445-\u0410\u0441\u0442\u0440\u0430\u00bb, Microsoft Corp, Google Inc, \u0410\u041e \u00ab\u041d\u041f\u041f\u041a\u0422\u00bb",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "7.3 (\u0420\u0415\u0414 \u041e\u0421), 1.6 \u00ab\u0421\u043c\u043e\u043b\u0435\u043d\u0441\u043a\u00bb (Astra Linux Common Edition), \u0434\u043e 127.0.2651.74 (Microsoft Edge), \u0434\u043e 127.0.6533.72 (Google Chrome), \u0434\u043e 127.0.6533.73 (Google Chrome), \u0434\u043e 2.12 (\u041e\u0421\u041e\u041d \u041e\u0421\u043d\u043e\u0432\u0430 \u041enyx)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\n\n\u0414\u043b\u044f Google Chrome:\nhttps://chromereleases.googleblog.com/2024/07/stable-channel-update-for-desktop_23.html\n\n\u0414\u043b\u044f Microsoft Edge:\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-6992\n\n\u0414\u043b\u044f \u0420\u0435\u0434\u041e\u0421: http://repo.red-soft.ru/redos/7.3c/x86_64/updates/\n\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f chromium \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 131.0.6778.264+repack-1~deb12u1.osnova2u1\n\n\u0414\u043b\u044f \u041e\u0421 Astra Linux:\n\u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u0430\u043a\u0435\u0442 chromium \u0434\u043e 1:142.0.7444.175-0astragost0+ci1 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f: https://wiki.astralinux.ru/astra-linux-se16-bulletin-20251225SE16",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "23.07.2024",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "20.01.2026",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "31.07.2024",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2024-05896",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2024-6992",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "\u0420\u0415\u0414 \u041e\u0421 (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21163751), Astra Linux Common Edition (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21164433), Microsoft Edge, Google Chrome, \u041e\u0421\u041e\u041d \u041e\u0421\u043d\u043e\u0432\u0430 \u041enyx (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21165913)",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Linux - , Microsoft Corp Windows - , Apple Inc. MacOS - , \u041e\u041e\u041e \u00ab\u0420\u0435\u0434 \u0421\u043e\u0444\u0442\u00bb \u0420\u0415\u0414 \u041e\u0421 7.3  (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21163751), \u041e\u041e\u041e \u00ab\u0420\u0443\u0441\u0411\u0418\u0422\u0435\u0445-\u0410\u0441\u0442\u0440\u0430\u00bb Astra Linux Common Edition 1.6 \u00ab\u0421\u043c\u043e\u043b\u0435\u043d\u0441\u043a\u00bb  (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21164433), \u0410\u041e \u00ab\u041d\u041f\u041f\u041a\u0422\u00bb \u041e\u0421\u041e\u041d \u041e\u0421\u043d\u043e\u0432\u0430 \u041enyx \u0434\u043e 2.12  (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21165913)",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 ANGLE \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432 Google Chrome \u0438 Microsoft Edge, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u0427\u0442\u0435\u043d\u0438\u0435 \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u0430\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430 (CWE-125)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 ANGLE \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432 Google Chrome \u0438 Microsoft Edge \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0447\u0442\u0435\u043d\u0438\u0435\u043c \u0434\u0430\u043d\u043d\u044b\u0445 \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u0430\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://chromereleases.googleblog.com/2024/07/stable-channel-update-for-desktop_23.html\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-6992\nhttps://threats.kaspersky.com/ru/vulnerability/KLA71043/\nhttp://repo.red-soft.ru/redos/7.3c/x86_64/updates/\nhttps://\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430.\u043d\u043f\u043f\u043a\u0442.\u0440\u0444/bin/view/\u041e\u0421\u043d\u043e\u0432\u0430/\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f/2.12/\nhttps://wiki.astralinux.ru/astra-linux-se16-bulletin-20251225SE16",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430, \u041f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u0435 \u041f\u041e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-125",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 10)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 8,8)"
}

    OPENSUSE-SU-2024:0254-2

    Vulnerability from csaf_opensuse - Published: 2024-08-18 22:20 - Updated: 2026-09-20 19:49
    Summary
    Security update for chromium, gn, rust-bindgen
    Severity
    Important
    Scope
    25 vulnerabilities in this advisory, including CVE-2024-6992.
    CVE-2024-6992
    Recommended: 56 products
    Open the full advisory

    OPENSUSE-SU-2024:14272-1

    Vulnerability from csaf_opensuse - Published: 2024-08-18 00:00 - Updated: 2026-09-20 21:16
    Summary
    chromedriver-127.0.6533.119-1.1 on GA media
    Severity
    Moderate
    Scope
    25 vulnerabilities in this advisory, including CVE-2024-6992.
    CVE-2024-6992
    Recommended: 8 products
    Open the full advisory

    WID-SEC-W-2024-1694

    Vulnerability from csaf_certbund - Published: 2024-07-23 22:00 - Updated: 2024-09-08 22:00
    Summary
    Google Chrome / Microsoft Edge: Mehrere Schwachstellen
    Severity
    Hoch
    Scope
    16 vulnerabilities in this advisory, including CVE-2024-6992.
    CVE-2024-6992

    Es bestehen mehrere Schwachstellen in Google Chrome / Microsoft Edge. Diese Fehler bestehen in mehreren Komponenten wie den Downloads, den Tabs, der Benutzerführung oder CSS, unter anderem aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Use-after-free-, einer Race-Condition oder einem Out-of-bounds-Speicherzugriff und mehr. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen oder einen unspezifischen Angriff durchzuführen. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion.

    Known affected: 6 products
    Open the full advisory