GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration
Search

Find a vulnerability

Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

    Related vulnerabilities

    CERTFR-2024-AVI-0622

    Vulnerability from certfr_avis - Published: - Updated:

    De multiples vulnérabilités ont été découvertes dans Google Chrome. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.

    Solutions

    Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

    Impacted products
    Vendor Product Description
    Google Chrome Chrome versions antérieures à 127.0.6533.72 sur Linux
    Google Chrome Chrome versions antérieures à 127.0.6533.72/73 sur Windows et Mac
    References
    Bulletin de sécurité Google Chrome 2024-07-23 vendor-advisory

    Show details on source website
    To clipboard 

    {
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Chrome versions ant\u00e9rieures \u00e0 127.0.6533.72 sur Linux",
      "product": {
        "name": "Chrome",
        "vendor": {
          "name": "Google",
          "scada": false
        }
      }
    },
    {
      "description": "Chrome versions ant\u00e9rieures \u00e0 127.0.6533.72/73 sur Windows et Mac",
      "product": {
        "name": "Chrome",
        "vendor": {
          "name": "Google",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2024-7000",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-7000"
    },
    {
      "name": "CVE-2024-6989",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6989"
    },
    {
      "name": "CVE-2024-6992",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6992"
    },
    {
      "name": "CVE-2024-6997",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6997"
    },
    {
      "name": "CVE-2024-6995",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6995"
    },
    {
      "name": "CVE-2024-7005",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-7005"
    },
    {
      "name": "CVE-2024-7004",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-7004"
    },
    {
      "name": "CVE-2024-6999",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6999"
    },
    {
      "name": "CVE-2024-6988",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6988"
    },
    {
      "name": "CVE-2024-7001",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-7001"
    },
    {
      "name": "CVE-2024-6996",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6996"
    },
    {
      "name": "CVE-2024-6994",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6994"
    },
    {
      "name": "CVE-2024-6993",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6993"
    },
    {
      "name": "CVE-2024-7003",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-7003"
    },
    {
      "name": "CVE-2024-6998",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6998"
    },
    {
      "name": "CVE-2024-6991",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6991"
    }
  ],
  "links": [],
  "reference": "CERTFR-2024-AVI-0622",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2024-07-24T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Google Chrome. Elles permettent \u00e0 un attaquant de provoquer un probl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Google Chrome",
  "vendor_advisories": [
    {
      "published_at": "2024-07-23",
      "title": "Bulletin de s\u00e9curit\u00e9 Google Chrome",
      "url": "https://chromereleases.googleblog.com/2024/07/stable-channel-update-for-desktop_23.html"
    }
  ]
}

    CERTFR-2024-AVI-0628

    Vulnerability from certfr_avis - Published: - Updated:

    De multiples vulnérabilités ont été découvertes dans Microsoft Edge. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une atteinte à la confidentialité des données et un problème de sécurité non spécifié par l'éditeur.

    Solutions

    Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

    Impacted products
    Vendor Product Description
    Microsoft Edge Microsoft Edge versions antérieures à 127.0.2651.74
    References

    Show details on source website
    To clipboard 

    {
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Microsoft Edge versions ant\u00e9rieures \u00e0 127.0.2651.74",
      "product": {
        "name": "Edge",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2024-7000",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-7000"
    },
    {
      "name": "CVE-2024-6989",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6989"
    },
    {
      "name": "CVE-2024-6992",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6992"
    },
    {
      "name": "CVE-2024-6997",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6997"
    },
    {
      "name": "CVE-2024-6995",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6995"
    },
    {
      "name": "CVE-2024-7005",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-7005"
    },
    {
      "name": "CVE-2024-7004",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-7004"
    },
    {
      "name": "CVE-2024-6999",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6999"
    },
    {
      "name": "CVE-2024-6988",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6988"
    },
    {
      "name": "CVE-2024-7001",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-7001"
    },
    {
      "name": "CVE-2024-6996",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6996"
    },
    {
      "name": "CVE-2024-6994",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6994"
    },
    {
      "name": "CVE-2024-6993",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6993"
    },
    {
      "name": "CVE-2024-7003",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-7003"
    },
    {
      "name": "CVE-2024-6998",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6998"
    },
    {
      "name": "CVE-2024-39379",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-39379"
    },
    {
      "name": "CVE-2024-6991",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6991"
    },
    {
      "name": "CVE-2024-38103",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-38103"
    }
  ],
  "links": [],
  "reference": "CERTFR-2024-AVI-0628",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2024-07-26T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Microsoft Edge. Elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et un probl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Microsoft Edge",
  "vendor_advisories": [
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-6993",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-6993"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-7000",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-7000"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-6994",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-6994"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-7001",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-7001"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-39379",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-39379"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-7003",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-7003"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-6996",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-6996"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-6992",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-6992"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-7005",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-7005"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-38103",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38103"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-6997",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-6997"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-6988",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-6988"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-6995",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-6995"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-6991",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-6991"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-6989",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-6989"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-6998",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-6998"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-6999",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-6999"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-7004",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-7004"
    }
  ]
}

    CERTFR-2024-AVI-0622

    Vulnerability from certfr_avis - Published: - Updated:

    De multiples vulnérabilités ont été découvertes dans Google Chrome. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.

    Solutions

    Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

    Impacted products
    Vendor Product Description
    Google Chrome Chrome versions antérieures à 127.0.6533.72 sur Linux
    Google Chrome Chrome versions antérieures à 127.0.6533.72/73 sur Windows et Mac
    References
    Bulletin de sécurité Google Chrome 2024-07-23 vendor-advisory

    Show details on source website
    To clipboard 

    {
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Chrome versions ant\u00e9rieures \u00e0 127.0.6533.72 sur Linux",
      "product": {
        "name": "Chrome",
        "vendor": {
          "name": "Google",
          "scada": false
        }
      }
    },
    {
      "description": "Chrome versions ant\u00e9rieures \u00e0 127.0.6533.72/73 sur Windows et Mac",
      "product": {
        "name": "Chrome",
        "vendor": {
          "name": "Google",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2024-7000",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-7000"
    },
    {
      "name": "CVE-2024-6989",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6989"
    },
    {
      "name": "CVE-2024-6992",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6992"
    },
    {
      "name": "CVE-2024-6997",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6997"
    },
    {
      "name": "CVE-2024-6995",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6995"
    },
    {
      "name": "CVE-2024-7005",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-7005"
    },
    {
      "name": "CVE-2024-7004",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-7004"
    },
    {
      "name": "CVE-2024-6999",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6999"
    },
    {
      "name": "CVE-2024-6988",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6988"
    },
    {
      "name": "CVE-2024-7001",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-7001"
    },
    {
      "name": "CVE-2024-6996",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6996"
    },
    {
      "name": "CVE-2024-6994",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6994"
    },
    {
      "name": "CVE-2024-6993",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6993"
    },
    {
      "name": "CVE-2024-7003",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-7003"
    },
    {
      "name": "CVE-2024-6998",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6998"
    },
    {
      "name": "CVE-2024-6991",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6991"
    }
  ],
  "links": [],
  "reference": "CERTFR-2024-AVI-0622",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2024-07-24T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Google Chrome. Elles permettent \u00e0 un attaquant de provoquer un probl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Google Chrome",
  "vendor_advisories": [
    {
      "published_at": "2024-07-23",
      "title": "Bulletin de s\u00e9curit\u00e9 Google Chrome",
      "url": "https://chromereleases.googleblog.com/2024/07/stable-channel-update-for-desktop_23.html"
    }
  ]
}

    CERTFR-2024-AVI-0628

    Vulnerability from certfr_avis - Published: - Updated:

    De multiples vulnérabilités ont été découvertes dans Microsoft Edge. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une atteinte à la confidentialité des données et un problème de sécurité non spécifié par l'éditeur.

    Solutions

    Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

    Impacted products
    Vendor Product Description
    Microsoft Edge Microsoft Edge versions antérieures à 127.0.2651.74
    References

    Show details on source website
    To clipboard 

    {
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Microsoft Edge versions ant\u00e9rieures \u00e0 127.0.2651.74",
      "product": {
        "name": "Edge",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2024-7000",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-7000"
    },
    {
      "name": "CVE-2024-6989",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6989"
    },
    {
      "name": "CVE-2024-6992",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6992"
    },
    {
      "name": "CVE-2024-6997",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6997"
    },
    {
      "name": "CVE-2024-6995",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6995"
    },
    {
      "name": "CVE-2024-7005",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-7005"
    },
    {
      "name": "CVE-2024-7004",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-7004"
    },
    {
      "name": "CVE-2024-6999",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6999"
    },
    {
      "name": "CVE-2024-6988",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6988"
    },
    {
      "name": "CVE-2024-7001",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-7001"
    },
    {
      "name": "CVE-2024-6996",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6996"
    },
    {
      "name": "CVE-2024-6994",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6994"
    },
    {
      "name": "CVE-2024-6993",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6993"
    },
    {
      "name": "CVE-2024-7003",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-7003"
    },
    {
      "name": "CVE-2024-6998",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6998"
    },
    {
      "name": "CVE-2024-39379",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-39379"
    },
    {
      "name": "CVE-2024-6991",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6991"
    },
    {
      "name": "CVE-2024-38103",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-38103"
    }
  ],
  "links": [],
  "reference": "CERTFR-2024-AVI-0628",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2024-07-26T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Microsoft Edge. Elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et un probl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Microsoft Edge",
  "vendor_advisories": [
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-6993",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-6993"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-7000",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-7000"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-6994",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-6994"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-7001",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-7001"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-39379",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-39379"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-7003",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-7003"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-6996",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-6996"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-6992",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-6992"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-7005",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-7005"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-38103",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38103"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-6997",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-6997"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-6988",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-6988"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-6995",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-6995"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-6991",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-6991"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-6989",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-6989"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-6998",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-6998"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-6999",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-6999"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-7004",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-7004"
    }
  ]
}

    BDU:2024-05932

    Vulnerability from fstec - Published: 23.07.2024
    VLAI
    Title
    Уязвимость компонента Canvas браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю получить несанкционированный доступ к ограниченным функциональным возможностям
    Description
    Уязвимость компонента Canvas браузеров Google Chrome и Microsoft Edge связана с недостатками контроля доступа. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, получить несанкционированный доступ к ограниченным функциональным возможностям
    Severity
    AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    Vendor
    ООО «Ред Софт», ООО «РусБИТех-Астра», Microsoft Corp, Google Inc, АО "НППКТ"
    Software Name
    РЕД ОС (запись в едином реестре российских программ №3751), Astra Linux Common Edition (запись в едином реестре российских программ №4433), Microsoft Edge, Google Chrome, ОСОН ОСнова Оnyx (запись в едином реестре российских программ №5913)
    Software Version
    7.3 (РЕД ОС), 1.6 «Смоленск» (Astra Linux Common Edition), до 127.0.2651.74 (Microsoft Edge), до 127.0.6533.72 (Google Chrome), до 2.12 (ОСОН ОСнова Оnyx)
    Possible Mitigations
    Использование рекомендаций: Для Google Chrome: https://chromereleases.googleblog.com/2024/07/stable-channel-update-for-desktop_23.html Для Microsoft Edge: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-6993 Для РедОС: http://repo.red-soft.ru/redos/7.3c/x86_64/updates/ Обновление программного обеспечения chromium до версии 131.0.6778.264+repack-1~deb12u1.osnova2u1 Для ОС Astra Linux: обновить пакет chromium до 1:142.0.7444.175-0astragost0+ci1 или более высокой версии, используя рекомендации производителя: https://wiki.astralinux.ru/astra-linux-se16-bulletin-20251225SE16
    Reference
    https://chromereleases.googleblog.com/2024/07/stable-channel-update-for-desktop_23.html https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-6993 https://threats.kaspersky.com/ru/vulnerability/KLA71043/ https://vuldb.com/?id.272333 https://www.cybersecurity-help.cz/vdb/SB2024072631 http://repo.red-soft.ru/redos/7.3c/x86_64/updates/ https://поддержка.нппкт.рф/bin/view/ОСнова/Обновления/2.12/ https://wiki.astralinux.ru/astra-linux-se16-bulletin-20251225SE16
    CWE
    CWE-284
    To clipboard 

    {
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
  "CVSS 3.0": "AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "TO1456",
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": "TO1456 \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Microsoft Edge ",
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u041e\u041e\u041e \u00ab\u0420\u0435\u0434 \u0421\u043e\u0444\u0442\u00bb, \u041e\u041e\u041e \u00ab\u0420\u0443\u0441\u0411\u0418\u0422\u0435\u0445-\u0410\u0441\u0442\u0440\u0430\u00bb, Microsoft Corp, Google Inc, \u0410\u041e \"\u041d\u041f\u041f\u041a\u0422\"",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "7.3 (\u0420\u0415\u0414 \u041e\u0421), 1.6 \u00ab\u0421\u043c\u043e\u043b\u0435\u043d\u0441\u043a\u00bb (Astra Linux Common Edition), \u0434\u043e 127.0.2651.74 (Microsoft Edge), \u0434\u043e 127.0.6533.72 (Google Chrome), \u0434\u043e 2.12 (\u041e\u0421\u041e\u041d \u041e\u0421\u043d\u043e\u0432\u0430 \u041enyx)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\n\n\u0414\u043b\u044f Google Chrome:\nhttps://chromereleases.googleblog.com/2024/07/stable-channel-update-for-desktop_23.html\n\n\u0414\u043b\u044f Microsoft Edge:\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-6993\n\n\u0414\u043b\u044f \u0420\u0435\u0434\u041e\u0421: http://repo.red-soft.ru/redos/7.3c/x86_64/updates/\n\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f chromium \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 131.0.6778.264+repack-1~deb12u1.osnova2u1\n\n\u0414\u043b\u044f \u041e\u0421 Astra Linux:\n\u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u0430\u043a\u0435\u0442 chromium \u0434\u043e 1:142.0.7444.175-0astragost0+ci1 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f: https://wiki.astralinux.ru/astra-linux-se16-bulletin-20251225SE16",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "23.07.2024",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "20.01.2026",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "01.08.2024",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2024-05932",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2024-6993",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "\u0420\u0415\u0414 \u041e\u0421 (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21163751), Astra Linux Common Edition (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21164433), Microsoft Edge, Google Chrome, \u041e\u0421\u041e\u041d \u041e\u0421\u043d\u043e\u0432\u0430 \u041enyx (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21165913)",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Linux - , Microsoft Corp Windows - , Apple Inc. MacOS - , \u041e\u041e\u041e \u00ab\u0420\u0435\u0434 \u0421\u043e\u0444\u0442\u00bb \u0420\u0415\u0414 \u041e\u0421 7.3  (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21163751), \u041e\u041e\u041e \u00ab\u0420\u0443\u0441\u0411\u0418\u0422\u0435\u0445-\u0410\u0441\u0442\u0440\u0430\u00bb Astra Linux Common Edition 1.6 \u00ab\u0421\u043c\u043e\u043b\u0435\u043d\u0441\u043a\u00bb  (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21164433), \u0410\u041e \"\u041d\u041f\u041f\u041a\u0422\" \u041e\u0421\u041e\u041d \u041e\u0421\u043d\u043e\u0432\u0430 \u041enyx \u0434\u043e 2.12  (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21165913)",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 Canvas \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432 Google Chrome \u0438 Microsoft Edge, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u043c \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u043c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044f\u043c",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u0430 (CWE-284)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 Canvas \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432 Google Chrome \u0438 Microsoft Edge \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e, \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u043c \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u043c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044f\u043c",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u0435 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://chromereleases.googleblog.com/2024/07/stable-channel-update-for-desktop_23.html\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-6993\nhttps://threats.kaspersky.com/ru/vulnerability/KLA71043/\nhttps://vuldb.com/?id.272333\nhttps://www.cybersecurity-help.cz/vdb/SB2024072631\nhttp://repo.red-soft.ru/redos/7.3c/x86_64/updates/\nhttps://\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430.\u043d\u043f\u043f\u043a\u0442.\u0440\u0444/bin/view/\u041e\u0421\u043d\u043e\u0432\u0430/\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f/2.12/\nhttps://wiki.astralinux.ru/astra-linux-se16-bulletin-20251225SE16",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430, \u041f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u0435 \u041f\u041e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-284",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 10)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 8,8)"
}

    CNVD-2024-33611

    Vulnerability from cnvd - Published: 2024-07-26
    VLAI
    Title
    Google Chrome安全绕过漏洞（CNVD-2024-33611）
    Description
    Google Chrome是美国谷歌（Google）公司的一款Web浏览器。 Google Chrome存在安全绕过漏洞，该漏洞源于Canvas不适当实现。攻击者可利用该漏洞绕过安全限制。
    Severity
    高
    Patch Name
    Google Chrome安全绕过漏洞（CNVD-2024-33611）的补丁
    Patch Description
    Google Chrome是美国谷歌（Google）公司的一款Web浏览器。 Google Chrome存在安全绕过漏洞，该漏洞源于Canvas不适当实现。攻击者可利用该漏洞绕过安全限制。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。
    Formal description

    厂商已发布了漏洞修复程序，请及时关注更新： https://chromereleases.googleblog.com

    Reference
    https://chromereleases.googleblog.com/2024/07/stable-channel-update-for-desktop_23.html
    Impacted products
    Name
    Google Chrome 127.0
    Show details on source website
    To clipboard 

    {
  "cves": {
    "cve": {
      "cveNumber": "CVE-2024-6993"
    }
  },
  "description": "Google Chrome\u662f\u7f8e\u56fd\u8c37\u6b4c\uff08Google\uff09\u516c\u53f8\u7684\u4e00\u6b3eWeb\u6d4f\u89c8\u5668\u3002\n\nGoogle Chrome\u5b58\u5728\u5b89\u5168\u7ed5\u8fc7\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8eCanvas\u4e0d\u9002\u5f53\u5b9e\u73b0\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u7ed5\u8fc7\u5b89\u5168\u9650\u5236\u3002",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://chromereleases.googleblog.com",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2024-33611",
  "openTime": "2024-07-26",
  "patchDescription": "Google Chrome\u662f\u7f8e\u56fd\u8c37\u6b4c\uff08Google\uff09\u516c\u53f8\u7684\u4e00\u6b3eWeb\u6d4f\u89c8\u5668\u3002\r\n\r\nGoogle Chrome\u5b58\u5728\u5b89\u5168\u7ed5\u8fc7\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8eCanvas\u4e0d\u9002\u5f53\u5b9e\u73b0\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u7ed5\u8fc7\u5b89\u5168\u9650\u5236\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Google Chrome\u5b89\u5168\u7ed5\u8fc7\u6f0f\u6d1e\uff08CNVD-2024-33611\uff09\u7684\u8865\u4e01",
  "products": {
    "product": "Google Chrome 127.0"
  },
  "referenceLink": "https://chromereleases.googleblog.com/2024/07/stable-channel-update-for-desktop_23.html",
  "serverity": "\u9ad8",
  "submitTime": "2024-07-25",
  "title": "Google Chrome\u5b89\u5168\u7ed5\u8fc7\u6f0f\u6d1e\uff08CNVD-2024-33611\uff09"
}

    OPENSUSE-SU-2024:0254-2

    Vulnerability from csaf_opensuse - Published: 2024-08-18 22:20 - Updated: 2024-08-18 22:20
    Summary
    Security update for chromium, gn, rust-bindgen
    Severity
    Important
    Scope
    25 vulnerabilities in this advisory, including CVE-2024-6993.
    CVE-2024-6993
    Recommended: 56 products
    Open the full advisory

    OPENSUSE-SU-2024:14272-1

    Vulnerability from csaf_opensuse - Published: 2024-08-18 00:00 - Updated: 2024-08-18 00:00
    Summary
    chromedriver-127.0.6533.119-1.1 on GA media
    Severity
    Moderate
    Scope
    25 vulnerabilities in this advisory, including CVE-2024-6993.
    CVE-2024-6993
    Recommended: 8 products
    Open the full advisory

    WID-SEC-W-2024-1694

    Vulnerability from csaf_certbund - Published: 2024-07-23 22:00 - Updated: 2024-09-08 22:00
    Summary
    Google Chrome / Microsoft Edge: Mehrere Schwachstellen
    Severity
    Hoch
    Scope
    16 vulnerabilities in this advisory, including CVE-2024-6993.
    CVE-2024-6993

    Es bestehen mehrere Schwachstellen in Google Chrome / Microsoft Edge. Diese Fehler bestehen in mehreren Komponenten wie den Downloads, den Tabs, der Benutzerführung oder CSS, unter anderem aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Use-after-free-, einer Race-Condition oder einem Out-of-bounds-Speicherzugriff und mehr. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen oder einen unspezifischen Angriff durchzuführen. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion.

    Known affected: 6 products
    Open the full advisory