Out of bounds memory access in ANGLE in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - Out of bounds memory access in ANGLE in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to
    potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)
    (CVE-2024-7532)

  - Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to
    potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
    (CVE-2024-7965)

  - Heap buffer overflow in Fonts in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to
    potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
    (CVE-2024-7967)

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - Type Confusion in V8 in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially
    exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2024-7550)

  - Inappropriate Implementation in DevTools in Google Chrome prior to 126.0.6478.54 allowed an attacker who
    convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome
    Extension. (Chromium security severity: High) (CVE-2024-5836)

  - Inappropriate implementation in V8 in Google Chrome prior to 126.0.6478.114 allowed a remote attacker to
    perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)
    (CVE-2024-6101)

  - Use after free in Dawn in Google Chrome prior to 126.0.6478.114 allowed a remote attacker to potentially
    exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2024-6103)

  - Use after free in Screen Capture in Google Chrome prior to 126.0.6478.182 allowed a remote attacker who
    convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted
    HTML page. (Chromium security severity: High) (CVE-2024-6774)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Out of bounds memory access in ANGLE in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)     (CVE-2024-7532)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote host is affected by the vulnerability described in GLSA-202501-09 (QtWebEngine: Multiple Vulnerabilities)

    Multiple vulnerabilities have been discovered in QtWebEngine. Please review the CVE identifiers referenced     below for details.

Tenable has extracted the preceding description block directly from the Gentoo Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 3092668e-97e4-11ef-bdd9-4ccc6adda413 advisory.

    Backports for 15 security bugs in Chromium:

Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2024:0254-2 advisory.

    - Chromium 127.0.6533.119 (boo#1228941)

      * CVE-2024-7532: Out of bounds memory access in ANGLE
      * CVE-2024-7533: Use after free in Sharing
      * CVE-2024-7550: Type Confusion in V8
      * CVE-2024-7534: Heap buffer overflow in Layout
      * CVE-2024-7535: Inappropriate implementation in V8
      * CVE-2024-7536: Use after free in WebAudio

    - Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)

      * CVE-2024-6988: Use after free in Downloads
      * CVE-2024-6989: Use after free in Loader
      * CVE-2024-6991: Use after free in Dawn
      * CVE-2024-6992: Out of bounds memory access in ANGLE
      * CVE-2024-6993: Inappropriate implementation in Canvas
      * CVE-2024-6994: Heap buffer overflow in Layout
      * CVE-2024-6995: Inappropriate implementation in Fullscreen
      * CVE-2024-6996: Race in Frames
      * CVE-2024-6997: Use after free in Tabs
      * CVE-2024-6998: Use after free in User Education
      * CVE-2024-6999: Inappropriate implementation in FedCM
      * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
      * CVE-2024-7001: Inappropriate implementation in HTML
      * CVE-2024-7003: Inappropriate implementation in FedCM
      * CVE-2024-7004: Insufficient validation of untrusted input         in Safe Browsing
      * CVE-2024-7005: Insufficient validation of untrusted input         in Safe Browsing
      * CVE-2024-6990: Uninitialized Use in Dawn
      * CVE-2024-7255: Out of bounds read in WebTransport
      * CVE-2024-7256: Insufficient data validation in Dawn

    gh:

    - Update to version 0.20240730:
      * Rust: link_output, depend_output and runtime_outputs for dylibs
      * Add missing reference section to function_toolchain.cc
      * Do not cleanup args.gn imports located in the output directory.
      * Fix expectations in NinjaRustBinaryTargetWriterTest.SwiftModule
      * Do not add native dependencies to the library search path
      * Support linking frameworks and swiftmodules in Rust targets
      * [desc] Silence print() statements when outputing json
      * infra: Move CI/try builds to Ubuntu-22.04
      * [MinGW] Fix mingw building issues
      * [gn] Fix 'link' in the //examples/simple_build/build/toolchain/BUILD.gn
      * [template] Fix 'rule alink_thin' in the //build/build_linux.ninja.template
      * Allow multiple --ide switches
      * [src] Add '#include <limits>' in the //src/base/files/file_enumerator_win.cc
      * Get updates to infra/recipes.py from upstream
      * Revert 'Teach gn to handle systems with > 64 processors'
      * [apple] Rename the code-signing properties of create_bundle
      * Fix a typo in 'gn help refs' output
      * Revert '[bundle] Use 'phony' builtin tool for create_bundle targets'
      * [bundle] Use 'phony' builtin tool for create_bundle targets
      * [ios] Simplify handling of assets catalog
      * [swift] List all outputs as deps of 'source_set' stamp file
      * [swift] Update `gn check ...` to consider the generated header
      * [swift] Set `restat = 1` to swift build rules
      * Fix build with gcc12
      * [label_matches] Add new functions label_matches(), filter_labels_include() and filter_labels_exclude()
      * [swift] Remove problematic use of 'stamp' tool
      * Implement new --ninja-outputs-file option.
      * Add NinjaOutputsWriter class
      * Move InvokePython() function to its own source file.
      * zos: build with -DZOSLIB_OVERRIDE_CLIB to override creat
      * Enable C++ runtime assertions in debug mode.
      * Fix regression in MakeRelativePath()
      * fix: Fix Windows MakeRelativePath.
      * Add long path support for windows
      * Ensure read_file() files are considered by 'gn analyze'
      * apply 2to3 to for some Python scripts
      * Add rustflags to desc and help output
      * strings: support case insensitive check only in StartsWith/EndsWith
      * add .git-blame-ignore-revs
      * use std::{string,string_view}::{starts_with,ends_with}
      * apply clang-format to all C++ sources
      * add forward declaration in rust_values.h
      * Add `root_patterns` list to build configuration.
      * Use c++20 in GN build
      * update windows sdk to 2024-01-11
      * update windows sdk
      * Add linux-riscv64.
      * Update OWNERS list.
      * remove unused function
      * Ignore build warning -Werror=redundant-move
      * Fix --as=buildfile `gn desc deps` output.
      * Update recipe engine to 9dea1246.
      * treewide: Fix spelling mistakes

    Added rust-bindgen:

    - Version 0.69.1

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-0462a59d45 advisory.

    Update to 127.0.6533.99

          * Critical CVE-2024-7532: Out of bounds memory access in ANGLE
          * High CVE-2024-7533: Use after free in Sharing
          * High CVE-2024-7550: Type Confusion in V8
          * High CVE-2024-7534: Heap buffer overflow in Layout
          * High CVE-2024-7535: Inappropriate implementation in V8
          * High CVE-2024-7536: Use after free in WebAudio


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-b60f51180f advisory.

    Update to 127.0.6533.99

          * Critical CVE-2024-7532: Out of bounds memory access in ANGLE
          * High CVE-2024-7533: Use after free in Sharing
          * High CVE-2024-7550: Type Confusion in V8
          * High CVE-2024-7534: Heap buffer overflow in Layout
          * High CVE-2024-7535: Inappropriate implementation in V8
          * High CVE-2024-7536: Use after free in WebAudio


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Microsoft Edge installed on the remote Windows host is prior to 127.0.2651.98. It is, therefore, affected by multiple vulnerabilities as referenced in the August 8, 2024 advisory.

  - Out of bounds memory access in ANGLE in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)     (CVE-2024-7532)

  - Use after free in Sharing in Google Chrome on iOS prior to 127.0.6533.99 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)     (CVE-2024-7533)

  - Heap buffer overflow in Layout in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)     (CVE-2024-7534)

  - Inappropriate implementation in V8 in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)     (CVE-2024-7535)

  - Use after free in WebAudio in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)     (CVE-2024-7536)

  - Type Confusion in V8 in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2024-7550)

  - Microsoft Edge (HTML-based) Memory Corruption Vulnerability (CVE-2024-38218)

  - Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability (CVE-2024-38219)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5741 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-5741-1                   security@debian.org     https://www.debian.org/security/                           Andres Salomon     August 08, 2024                       https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : chromium     CVE ID         : CVE-2024-7532 CVE-2024-7533 CVE-2024-7534 CVE-2024-7535                      CVE-2024-7536 CVE-2024-7550

    Security issues were discovered in Chromium which could result     in the execution of arbitrary code, denial of service, or information     disclosure.

    For the stable distribution (bookworm), these problems have been fixed in     version 127.0.6533.99-1~deb12u1.

    We recommend that you upgrade your chromium packages.

    For the detailed security status of chromium please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/chromium

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 05cd9f82-5426-11ef-8a0f-a8a1599412c6 advisory.

    Chrome Releases reports:
    This update includes 5 security fixes:

Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Google Chrome installed on the remote macOS host is prior to 127.0.6533.99. It is, therefore, affected by multiple vulnerabilities as referenced in the 2024_08_stable-channel-update-for-desktop advisory.

  - Use after free in WebAudio in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)     (CVE-2024-7536)

  - Type Confusion in V8 in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2024-7550)

  - Out of bounds memory access in ANGLE in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)     (CVE-2024-7532)

  - Use after free in Sharing in Google Chrome on iOS prior to 127.0.6533.99 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)     (CVE-2024-7533)

  - Heap buffer overflow in Layout in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)     (CVE-2024-7534)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Google Chrome installed on the remote Windows host is prior to 127.0.6533.99. It is, therefore, affected by multiple vulnerabilities as referenced in the 2024_08_stable-channel-update-for-desktop advisory.

  - Use after free in WebAudio in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)     (CVE-2024-7536)

  - Type Confusion in V8 in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2024-7550)

  - Out of bounds memory access in ANGLE in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)     (CVE-2024-7532)

  - Use after free in Sharing in Google Chrome on iOS prior to 127.0.6533.99 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)     (CVE-2024-7533)

  - Heap buffer overflow in Layout in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)     (CVE-2024-7534)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
427532	Alpine: multiple qt5-qtwebengine packages: security update to 5.15.16-r10	Tenable Cloud Security	Alpine Linux Local Security Checks	high
427532	Alpine: multiple qt5-qtwebengine packages: security update to 5.15.16-r10	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
427443	Alpine: multiple qt6-qtwebengine packages: security update to 6.7.2-r2	Tenable Cloud Security	Alpine Linux Local Security Checks	critical
427443	Alpine: multiple qt6-qtwebengine packages: security update to 6.7.2-r2	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	critical
426655	Alpine: multiple qt5-qtwebengine packages: security update to 5.15.17-r1	Tenable Cloud Security	Alpine Linux Local Security Checks	high
426655	Alpine: multiple qt5-qtwebengine packages: security update to 5.15.17-r1	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
231687	Linux Distros Unpatched Vulnerability : CVE-2024-7532	Nessus	Misc.	high
214558	GLSA-202501-09 : QtWebEngine: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	critical
210058	FreeBSD : qt5-webengine -- Multiple vulnerabilities (3092668e-97e4-11ef-bdd9-4ccc6adda413)	Nessus	FreeBSD Local Security Checks	critical
206192	openSUSE 15 Security Update : chromium, gn, rust-bindgen (openSUSE-SU-2024:0254-2)	Nessus	SuSE Local Security Checks	high
205490	Fedora 40 : chromium (2024-0462a59d45)	Nessus	Fedora Local Security Checks	medium
205376	Fedora 39 : chromium (2024-b60f51180f)	Nessus	Fedora Local Security Checks	medium
205222	Microsoft Edge (Chromium) < 127.0.2651.98 Multiple Vulnerabilities	Nessus	Windows	critical
205190	Debian dsa-5741 : chromium - security update	Nessus	Debian Local Security Checks	high
205159	FreeBSD : chromium -- multiple security fixes (05cd9f82-5426-11ef-8a0f-a8a1599412c6)	Nessus	FreeBSD Local Security Checks	high
205017	Google Chrome < 127.0.6533.99 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	high
205016	Google Chrome < 127.0.6533.99 Multiple Vulnerabilities	Nessus	Windows	high

Detections

Analytics

CVE-2024-7532

high

Tenable Plugins

high

high

critical

critical

high

high

high

critical

critical

high

medium

medium

critical

high

high

high

high