Search

Find a vulnerability

Search criteria

    Related vulnerabilities

    BDU:2024-05932 (CVE-2024-6993)

    Vulnerability from fstec – Published: 2024-08-01 – Updated: 2026-01-20 – View on bdu.fstec.ru Fixed
    VLAI
    Title
    Уязвимость компонента Canvas браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю получить несанкционированный доступ к ограниченным функциональным возможностям
    Summary
    Уязвимость компонента Canvas браузеров Google Chrome и Microsoft Edge связана с недостатками контроля доступа. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, получить несанкционированный доступ к ограниченным функциональным возможностям
    Severity
    10.0 (High) CVSS 2.0
    AV:N/AC:L/Au:N/C:C/I:C/A:C
    8.8 (High) CVSS 3.0
    CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    Class
    Architecture vulnerability
    Status
    Confirmed by the vendor
    Exploitation
    Authorization bypass
    Incidents
    Being clarified
    Remediation
    Software update
    CWE
    • CWE-284 - Неправильный контроль доступа
    Aliases
    CVE-2024-6993
    References
    Impacted products
    Vendors
    ООО «Ред Софт», ООО «РусБИТех-Астра», Microsoft Corp, Google Inc, АО «НППКТ»
    Products
    РЕД ОС (запись в едином реестре российских программ №3751), Astra Linux Common Edition (запись в едином реестре российских программ №4433), Microsoft Edge, Google Chrome, ОСОН ОСнова Оnyx (запись в едином реестре российских программ №5913)
    Versions
    7.3 (РЕД ОС), 1.6 «Смоленск» (Astra Linux Common Edition), до 127.0.2651.74 (Microsoft Edge), до 127.0.6533.72 (Google Chrome), до 2.12 (ОСОН ОСнова Оnyx)
    Product types
    Operating system, Application software
    Platforms
    Сообщество свободного программного обеспечения Linux -, Microsoft Corp Windows -, Apple Inc. MacOS -, ООО «Ред Софт» РЕД ОС 7.3 (запись в едином реестре российских программ №3751), ООО «РусБИТех-Астра» Astra Linux Common Edition 1.6 «Смоленск» (запись в едином реестре российских программ №4433), АО «НППКТ» ОСОН ОСнова Оnyx до 2.12 (запись в едином реестре российских программ №5913)
    Mitigations
    Использование рекомендаций: Для Google Chrome: https://chromereleases.googleblog.com/2024/07/stable-channel-update-for-desktop_23.html Для Microsoft Edge: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-6993 Для РедОС: http://repo.red-soft.ru/redos/7.3c/x86_64/updates/ Обновление программного обеспечения chromium до версии 131.0.6778.264+repack-1~deb12u1.osnova2u1 Для ОС Astra Linux: обновить пакет chromium до 1:142.0.7444.175-0astragost0+ci1 или более высокой версии, используя рекомендации производителя: https://wiki.astralinux.ru/astra-linux-se16-bulletin-20251225SE16
    Remediation
    TO1456 Обновление Microsoft Edge
    To clipboard 

    {
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
  "CVSS 3.0": "AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "TO1456",
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": "TO1456 \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Microsoft Edge ",
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u041e\u041e\u041e \u00ab\u0420\u0435\u0434 \u0421\u043e\u0444\u0442\u00bb, \u041e\u041e\u041e \u00ab\u0420\u0443\u0441\u0411\u0418\u0422\u0435\u0445-\u0410\u0441\u0442\u0440\u0430\u00bb, Microsoft Corp, Google Inc, \u0410\u041e \u00ab\u041d\u041f\u041f\u041a\u0422\u00bb",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "7.3 (\u0420\u0415\u0414 \u041e\u0421), 1.6 \u00ab\u0421\u043c\u043e\u043b\u0435\u043d\u0441\u043a\u00bb (Astra Linux Common Edition), \u0434\u043e 127.0.2651.74 (Microsoft Edge), \u0434\u043e 127.0.6533.72 (Google Chrome), \u0434\u043e 2.12 (\u041e\u0421\u041e\u041d \u041e\u0421\u043d\u043e\u0432\u0430 \u041enyx)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\n\n\u0414\u043b\u044f Google Chrome:\nhttps://chromereleases.googleblog.com/2024/07/stable-channel-update-for-desktop_23.html\n\n\u0414\u043b\u044f Microsoft Edge:\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-6993\n\n\u0414\u043b\u044f \u0420\u0435\u0434\u041e\u0421: http://repo.red-soft.ru/redos/7.3c/x86_64/updates/\n\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f chromium \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 131.0.6778.264+repack-1~deb12u1.osnova2u1\n\n\u0414\u043b\u044f \u041e\u0421 Astra Linux:\n\u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u0430\u043a\u0435\u0442 chromium \u0434\u043e 1:142.0.7444.175-0astragost0+ci1 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f: https://wiki.astralinux.ru/astra-linux-se16-bulletin-20251225SE16",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "23.07.2024",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "20.01.2026",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "01.08.2024",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2024-05932",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2024-6993",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "\u0420\u0415\u0414 \u041e\u0421 (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21163751), Astra Linux Common Edition (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21164433), Microsoft Edge, Google Chrome, \u041e\u0421\u041e\u041d \u041e\u0421\u043d\u043e\u0432\u0430 \u041enyx (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21165913)",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Linux - , Microsoft Corp Windows - , Apple Inc. MacOS - , \u041e\u041e\u041e \u00ab\u0420\u0435\u0434 \u0421\u043e\u0444\u0442\u00bb \u0420\u0415\u0414 \u041e\u0421 7.3  (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21163751), \u041e\u041e\u041e \u00ab\u0420\u0443\u0441\u0411\u0418\u0422\u0435\u0445-\u0410\u0441\u0442\u0440\u0430\u00bb Astra Linux Common Edition 1.6 \u00ab\u0421\u043c\u043e\u043b\u0435\u043d\u0441\u043a\u00bb  (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21164433), \u0410\u041e \u00ab\u041d\u041f\u041f\u041a\u0422\u00bb \u041e\u0421\u041e\u041d \u041e\u0421\u043d\u043e\u0432\u0430 \u041enyx \u0434\u043e 2.12  (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21165913)",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 Canvas \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432 Google Chrome \u0438 Microsoft Edge, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u043c \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u043c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044f\u043c",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u0430 (CWE-284)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 Canvas \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432 Google Chrome \u0438 Microsoft Edge \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e, \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u043c \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u043c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044f\u043c",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u0435 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://chromereleases.googleblog.com/2024/07/stable-channel-update-for-desktop_23.html\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-6993\nhttps://threats.kaspersky.com/ru/vulnerability/KLA71043/\nhttps://vuldb.com/?id.272333\nhttps://www.cybersecurity-help.cz/vdb/SB2024072631\nhttp://repo.red-soft.ru/redos/7.3c/x86_64/updates/\nhttps://\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430.\u043d\u043f\u043f\u043a\u0442.\u0440\u0444/bin/view/\u041e\u0421\u043d\u043e\u0432\u0430/\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f/2.12/\nhttps://wiki.astralinux.ru/astra-linux-se16-bulletin-20251225SE16",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430, \u041f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u0435 \u041f\u041e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-284",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 10)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 8,8)"
}

    CERTFR-2024-AVI-0622

    Vulnerability from certfr_avis - Published: 2024-07-24 - Updated: 2024-07-24

    De multiples vulnérabilités ont été découvertes dans Google Chrome. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.

    Solutions

    Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

    Impacted products
    Vendor Product Description
    Google Chrome Chrome versions antérieures à 127.0.6533.72 sur Linux
    Google Chrome Chrome versions antérieures à 127.0.6533.72/73 sur Windows et Mac
    References
    Bulletin de sécurité Google Chrome 2024-07-23 vendor-advisory

    Show details on source website
    To clipboard 

    {
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Chrome versions ant\u00e9rieures \u00e0 127.0.6533.72 sur Linux",
      "product": {
        "name": "Chrome",
        "vendor": {
          "name": "Google",
          "scada": false
        }
      }
    },
    {
      "description": "Chrome versions ant\u00e9rieures \u00e0 127.0.6533.72/73 sur Windows et Mac",
      "product": {
        "name": "Chrome",
        "vendor": {
          "name": "Google",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2024-7000",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-7000"
    },
    {
      "name": "CVE-2024-6989",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6989"
    },
    {
      "name": "CVE-2024-6992",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6992"
    },
    {
      "name": "CVE-2024-6997",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6997"
    },
    {
      "name": "CVE-2024-6995",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6995"
    },
    {
      "name": "CVE-2024-7005",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-7005"
    },
    {
      "name": "CVE-2024-7004",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-7004"
    },
    {
      "name": "CVE-2024-6999",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6999"
    },
    {
      "name": "CVE-2024-6988",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6988"
    },
    {
      "name": "CVE-2024-7001",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-7001"
    },
    {
      "name": "CVE-2024-6996",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6996"
    },
    {
      "name": "CVE-2024-6994",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6994"
    },
    {
      "name": "CVE-2024-6993",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6993"
    },
    {
      "name": "CVE-2024-7003",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-7003"
    },
    {
      "name": "CVE-2024-6998",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6998"
    },
    {
      "name": "CVE-2024-6991",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6991"
    }
  ],
  "initial_release_date": "2024-07-24T00:00:00",
  "last_revision_date": "2024-07-24T00:00:00",
  "links": [],
  "reference": "CERTFR-2024-AVI-0622",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2024-07-24T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Google Chrome. Elles permettent \u00e0 un attaquant de provoquer un probl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Google Chrome",
  "vendor_advisories": [
    {
      "published_at": "2024-07-23",
      "title": "Bulletin de s\u00e9curit\u00e9 Google Chrome",
      "url": "https://chromereleases.googleblog.com/2024/07/stable-channel-update-for-desktop_23.html"
    }
  ]
}

    CERTFR-2024-AVI-0628

    Vulnerability from certfr_avis - Published: 2024-07-26 - Updated: 2024-07-26

    De multiples vulnérabilités ont été découvertes dans Microsoft Edge. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une atteinte à la confidentialité des données et un problème de sécurité non spécifié par l'éditeur.

    Solutions

    Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

    Impacted products
    Vendor Product Description
    Microsoft Edge Microsoft Edge versions antérieures à 127.0.2651.74
    References

    Show details on source website
    To clipboard 

    {
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Microsoft Edge versions ant\u00e9rieures \u00e0 127.0.2651.74",
      "product": {
        "name": "Edge",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2024-7000",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-7000"
    },
    {
      "name": "CVE-2024-6989",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6989"
    },
    {
      "name": "CVE-2024-6992",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6992"
    },
    {
      "name": "CVE-2024-6997",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6997"
    },
    {
      "name": "CVE-2024-6995",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6995"
    },
    {
      "name": "CVE-2024-7005",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-7005"
    },
    {
      "name": "CVE-2024-7004",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-7004"
    },
    {
      "name": "CVE-2024-6999",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6999"
    },
    {
      "name": "CVE-2024-6988",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6988"
    },
    {
      "name": "CVE-2024-7001",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-7001"
    },
    {
      "name": "CVE-2024-6996",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6996"
    },
    {
      "name": "CVE-2024-6994",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6994"
    },
    {
      "name": "CVE-2024-6993",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6993"
    },
    {
      "name": "CVE-2024-7003",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-7003"
    },
    {
      "name": "CVE-2024-6998",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6998"
    },
    {
      "name": "CVE-2024-39379",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-39379"
    },
    {
      "name": "CVE-2024-6991",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6991"
    },
    {
      "name": "CVE-2024-38103",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-38103"
    }
  ],
  "initial_release_date": "2024-07-26T00:00:00",
  "last_revision_date": "2024-07-26T00:00:00",
  "links": [],
  "reference": "CERTFR-2024-AVI-0628",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2024-07-26T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Microsoft Edge. Elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et un probl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Microsoft Edge",
  "vendor_advisories": [
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-6993",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-6993"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-7000",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-7000"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-6994",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-6994"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-7001",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-7001"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-39379",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-39379"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-7003",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-7003"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-6996",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-6996"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-6992",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-6992"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-7005",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-7005"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-38103",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38103"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-6997",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-6997"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-6988",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-6988"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-6995",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-6995"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-6991",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-6991"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-6989",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-6989"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-6998",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-6998"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-6999",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-6999"
    },
    {
      "published_at": "2024-07-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2024-7004",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-7004"
    }
  ]
}

    CNVD-2024-33611

    Vulnerability from cnvd - Published: 2024-07-26
    VLAI
    Title
    Google Chrome安全绕过漏洞（CNVD-2024-33611）
    Description
    Google Chrome是美国谷歌（Google）公司的一款Web浏览器。 Google Chrome存在安全绕过漏洞，该漏洞源于Canvas不适当实现。攻击者可利用该漏洞绕过安全限制。
    Severity
    高
    Patch Name
    Google Chrome安全绕过漏洞（CNVD-2024-33611）的补丁
    Patch Description
    Google Chrome是美国谷歌（Google）公司的一款Web浏览器。 Google Chrome存在安全绕过漏洞，该漏洞源于Canvas不适当实现。攻击者可利用该漏洞绕过安全限制。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。
    Formal description

    厂商已发布了漏洞修复程序，请及时关注更新： https://chromereleases.googleblog.com

    Reference
    https://chromereleases.googleblog.com/2024/07/stable-channel-update-for-desktop_23.html
    Impacted products
    Name
    Google Chrome 127.0
    Show details on source website
    To clipboard 

    {
  "cves": {
    "cve": {
      "cveNumber": "CVE-2024-6993"
    }
  },
  "description": "Google Chrome\u662f\u7f8e\u56fd\u8c37\u6b4c\uff08Google\uff09\u516c\u53f8\u7684\u4e00\u6b3eWeb\u6d4f\u89c8\u5668\u3002\n\nGoogle Chrome\u5b58\u5728\u5b89\u5168\u7ed5\u8fc7\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8eCanvas\u4e0d\u9002\u5f53\u5b9e\u73b0\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u7ed5\u8fc7\u5b89\u5168\u9650\u5236\u3002",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://chromereleases.googleblog.com",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2024-33611",
  "openTime": "2024-07-26",
  "patchDescription": "Google Chrome\u662f\u7f8e\u56fd\u8c37\u6b4c\uff08Google\uff09\u516c\u53f8\u7684\u4e00\u6b3eWeb\u6d4f\u89c8\u5668\u3002\r\n\r\nGoogle Chrome\u5b58\u5728\u5b89\u5168\u7ed5\u8fc7\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8eCanvas\u4e0d\u9002\u5f53\u5b9e\u73b0\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u7ed5\u8fc7\u5b89\u5168\u9650\u5236\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Google Chrome\u5b89\u5168\u7ed5\u8fc7\u6f0f\u6d1e\uff08CNVD-2024-33611\uff09\u7684\u8865\u4e01",
  "products": {
    "product": "Google Chrome 127.0"
  },
  "referenceLink": "https://chromereleases.googleblog.com/2024/07/stable-channel-update-for-desktop_23.html",
  "serverity": "\u9ad8",
  "submitTime": "2024-07-25",
  "title": "Google Chrome\u5b89\u5168\u7ed5\u8fc7\u6f0f\u6d1e\uff08CNVD-2024-33611\uff09"
}

    OPENSUSE-SU-2024:0254-2

    Vulnerability from csaf_opensuse - Published: 2024-08-18 22:20 - Updated: 2026-09-20 19:49
    Summary
    Security update for chromium, gn, rust-bindgen
    Severity
    Important
    Scope
    25 vulnerabilities in this advisory, including CVE-2024-6993.
    CVE-2024-6993
    Recommended: 56 products
    Open the full advisory

    OPENSUSE-SU-2024:14272-1

    Vulnerability from csaf_opensuse - Published: 2024-08-18 00:00 - Updated: 2026-09-20 21:16
    Summary
    chromedriver-127.0.6533.119-1.1 on GA media
    Severity
    Moderate
    Scope
    25 vulnerabilities in this advisory, including CVE-2024-6993.
    CVE-2024-6993
    Recommended: 8 products
    Open the full advisory

    WID-SEC-W-2024-1694

    Vulnerability from csaf_certbund - Published: 2024-07-23 22:00 - Updated: 2026-08-26 22:00
    Summary
    Google Chrome / Microsoft Edge: Mehrere Schwachstellen
    Severity
    Hoch
    Scope
    16 vulnerabilities in this advisory, including CVE-2024-6993.
    CVE-2024-6993
    Known affected: 7 products
    Open the full advisory