Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
suseSuseOPENSUSE-SU-2022:10177-1
HistoryOct 31, 2022 - 12:00 a.m.

Security update for chromium (important)

2022-10-3100:00:00
lists.opensuse.org
17
chromium
security update
vulnerabilities
patch
type confusion
heap buffer overflow
use after free
insufficient data validation
inappropriate implementation
full screen mode
suse
opensuse
backports sle-15-sp3

EPSS

0.035

Percentile

91.6%

JSON

An update that fixes 11 vulnerabilities is now available.

Description:

This update for chromium fixes the following issues:

Chromium 107.0.5304.87 (boo#1204819)

  • CVE-2022-3723: Type Confusion in V8

Chromium 107.0.5304.68 (boo#1204732)

  • CVE-2022-3652: Type Confusion in V8
  • CVE-2022-3653: Heap buffer overflow in Vulkan
  • CVE-2022-3654: Use after free in Layout
  • CVE-2022-3655: Heap buffer overflow in Media Galleries
  • CVE-2022-3656: Insufficient data validation in File System
  • CVE-2022-3657: Use after free in Extensions
  • CVE-2022-3658: Use after free in Feedback service on Chrome OS
  • CVE-2022-3659: Use after free in Accessibility
  • CVE-2022-3660: Inappropriate implementation in Full screen mode
  • CVE-2022-3661: Insufficient data validation in Extensions

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

  • openSUSE Backports SLE-15-SP3:

    zypper in -t patch openSUSE-2022-10177=1

Related

mageia 1
suse 1
nessus 15
osv 16
openvas 12
debian 2
freebsd 2
kaspersky 5
chrome 2
cve 11
nvd 11
malwarebytes 1
attackerkb 1
prion 11
qualysblog 5
cnvd 11
mscve 9
cisa_kev 1
ubuntucve 11
cvelist 11
hivepro 2
veracode 11
debiancve 11
thn 7
impervablog 1
githubexploit 1
altlinux 1
github 1
avleonov 1
gentoo 1
mageia
mageia
Updated chromium-browser-stable packages fix security vulnerabilities
2022-11-13 05:25:20
suse
suse
Security update for chromium (important)
2022-10-31 00:00:00
nessus
nessus
openSUSE 15 Security Update : chromium (openSUSE-SU-2022:10180-1)
2022-11-01 00:00:00
openSUSE 15 Security Update : chromium (openSUSE-SU-2022:10177-1)
2022-11-01 00:00:00
FreeBSD : chromium -- multiple vulnerabilities (b4ef02f4-549f-11ed-8ad9-3065ec8fd3ec)
2022-10-25 00:00:00
osv
osv
chromedriver-107.0.5304.87-1.1 on GA media
2024-06-15 00:00:00
chromium - security update
2022-10-26 00:00:00
chromium - security update
2022-10-29 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2022-0419)
2022-11-14 00:00:00
Microsoft Edge (Chromium-Based) Multiple Vulnerabilities (Nov 2022)
2022-11-10 00:00:00
Google Chrome Security Update (stable-channel-update-for-desktop_25-2022-10) - Mac OS X
2022-10-28 00:00:00
debian
debian
[SECURITY] [DSA 5261-1] chromium security update
2022-10-26 18:26:49
[SECURITY] [DSA 5263-1] chromium security update
2022-10-29 20:36:13
freebsd
freebsd
chromium -- multiple vulnerabilities
2022-10-25 00:00:00
chromium -- Type confusion in V8
2022-10-27 00:00:00
kaspersky
kaspersky
KLA20019 Multiple vulnerabilities in Microsoft Browser
2022-10-27 00:00:00
KLA20017 Multiple vulnerabilities in Google Chrome
2022-10-25 00:00:00
KLA20018 DoS vulnerability in Google Chrome
2022-10-27 00:00:00
chrome
chrome
Stable Channel Update for Desktop
2022-10-25 00:00:00
Stable Channel Update for Desktop
2022-10-27 00:00:00
cve
cve
CVE-2022-3723
2022-11-01 23:15:19
CVE-2022-3661
2022-11-01 23:15:19
CVE-2022-3654
2022-11-01 23:15:18
nvd
nvd
CVE-2022-3723
2022-11-01 23:15:19
CVE-2022-3654
2022-11-01 23:15:18
CVE-2022-3661
2022-11-01 23:15:19
malwarebytes
malwarebytes
A Chrome fix for an in-the-wild exploit is out—Check your version
2022-10-28 21:45:00
attackerkb
attackerkb
CVE-2022-3723
2022-11-01 00:00:00
prion
prion
Type confusion
2022-11-01 23:15:00
Design/Logic Flaw
2022-11-01 23:15:00
Design/Logic Flaw
2022-11-01 23:15:00
qualysblog
qualysblog
Don’t spend another weekend patching Chrome
2022-10-28 22:07:37
Chrome Zero Day – Just Before the Weekend (again)
2022-10-28 19:40:19
Don’t Spend Your Holiday Season Patching Chrome
2022-11-29 18:26:11
cnvd
cnvd
Google Chrome V8 Code Execution Vulnerability (CNVD-2022-85092)
2022-10-31 00:00:00
Google Chrome Security Bypass Vulnerability (CNVD-2022-85089)
2022-10-27 00:00:00
Google Chrome Layout code execution vulnerability
2022-10-27 00:00:00
mscve
mscve
Chromium: CVE-2022-3723 Type Confusion in V8
2022-10-31 19:31:11
Chromium: CVE-2022-3661 Insufficient data validation in Extensions
2022-10-27 18:06:07
Chromium: CVE-2022-3654 Use after free in Layout
2022-10-27 18:05:40
cisa_kev
cisa_kev
Google Chromium V8 Type Confusion Vulnerability
2022-10-28 00:00:00
ubuntucve
ubuntucve
CVE-2022-3723
2022-11-01 00:00:00
CVE-2022-3654
2022-11-01 00:00:00
CVE-2022-3661
2022-11-01 00:00:00
cvelist
cvelist
CVE-2022-3723
2022-11-01 00:00:00
CVE-2022-3654
2022-11-01 00:00:00
CVE-2022-3661
2022-11-01 00:00:00
hivepro
hivepro
Google Chrome’s seventh zero-day of 2022
2022-11-01 05:21:34
Actors, Threats and Vulnerabilities 16 January 2023 – 22 January 2023
2023-01-25 03:14:57
veracode
veracode
Type Confusion
2022-11-16 15:53:26
Use After Free
2022-11-17 00:54:26
Information Disclosure
2022-11-17 00:51:25
debiancve
debiancve
CVE-2022-3723
2022-11-01 23:15:19
CVE-2022-3654
2022-11-01 23:15:18
CVE-2022-3661
2022-11-01 23:15:19
thn
thn
Experts Detail Chromium Browser Security Flaw Putting Confidential Data at Risk
2023-01-12 09:42:00
Google Issues Urgent Chrome Update to Patch Actively Exploited Zero-Day Vulnerability
2022-10-28 10:40:00
Google Releases Urgent Chrome Update to Fix Actively Exploited Zero-Day Vulnerability
2023-04-15 03:58:00
impervablog
impervablog
Google Chrome “SymStealer” Vulnerability: How to Protect Your Files from Being Stolen
2023-01-11 13:00:02
githubexploit
githubexploit
Exploit for Improper Input Validation in Google Chrome
2023-01-13 03:26:14
altlinux
altlinux
Security fix for the ALT Linux 10 package yandex-browser-stable version 23.1.2.1033-alt1
2023-04-04 00:00:00
github
github
Getting RCE in Chrome with incorrect side effect in the JIT compiler
2023-09-26 15:00:54
avleonov
avleonov
Microsoft Patch Tuesday November 2022: Exchange ProxyNotShell RCE, JScript9, MoTW, OpenSSL, Edge, CNG, Print Spooler
2022-11-25 20:56:48
gentoo
gentoo
Chromium, Google Chrome, Microsoft Edge: Multiple Vulnerabilities
2023-05-03 00:00:00

EPSS

0.035

Percentile

91.6%

JSON
Related for OPENSUSE-SU-2022:10177-1
mageia1suse1nessus15osv16openvas12debian2freebsd2kaspersky5chrome2cve11nvd11malwarebytes1attackerkb1prion11qualysblog5cnvd11mscve9cisa_kev1ubuntucve11cvelist11hivepro2veracode11debiancve11thn7impervablog1githubexploit1altlinux1github1avleonov1gentoo1