deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-21907
Published: 2024-01-03
Description: Newtonsoft.Json before version 13.0.1 is affected by a mishandling of exceptional conditions vulnerability. Crafted data that is passed to the JsonConvert.DeserializeObject method may trigger a StackOverflow exception resulting in denial of service. Depending on the usage of the library, an unauthenticated and remote attacker may be able to cause the denial of service condition.
CVSS Score: 7.5 (HIGH)
CWE: CWE-755, CWE-755
References: https://alephsecurity.com/2018/10/22/StackOverflowException/; https://alephsecurity.com/vulns/aleph-2018004; https://github.com/JamesNK/Newtonsoft.Json/commit/7e77bbe1beccceac4fc7b174b53abfefac278b66
CVE: CVE-2024-21908
Published: 2024-01-03
Description: TinyMCE versions before 5.9.0 are affected by a stored cross-site scripting vulnerability. An unauthenticated and remote attacker could insert crafted HTML into the editor resulting in arbitrary JavaScript execution in another user's browser.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/advisories/GHSA-5h9g-x5rv-25wg; https://github.com/tinymce/tinymce/security/advisories/GHSA-5h9g-x5rv-25wg; https://vulncheck.com/advisories/vc-advisory-GHSA-5h9g-x5rv-25wg
CVE: CVE-2024-21909
Published: 2024-01-03
Description: PeterO.Cbor versions 4.0.0 through 4.5.0 are vulnerable to a denial of 
service vulnerability. An attacker may trigger the denial of service 
condition by providing crafted data to the DecodeFromBytes or other 
decoding mechanisms in PeterO.Cbor. Depending on the usage of the 
library, an unauthenticated and remote attacker may be able to cause the
 denial of service condition.
CVSS Score: 7.5 (HIGH)
CWE: CWE-407, CWE-407
References: https://github.com/advisories/GHSA-6r92-cgxc-r5fg; https://github.com/peteroupc/CBOR/commit/b4117dbbb4cd5a4a963f9d0c9aa132f033e15b95; https://github.com/peteroupc/CBOR/compare/v4.5...v4.5.1
CVE: CVE-2024-21910
Published: 2024-01-03
Description: TinyMCE versions before 5.10.0 are affected by a cross-site scripting vulnerability. A remote and unauthenticated attacker could introduce crafted image or link URLs that would result in the execution of arbitrary JavaScript in an editing user's browser.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/advisories/GHSA-r8hm-w5f7-wj39; https://github.com/jazzband/django-tinymce/issues/366; https://github.com/jazzband/django-tinymce/releases/tag/3.4.0
CVE: CVE-2024-21911
Published: 2024-01-03
Description: TinyMCE versions before 5.6.0 are affected by a stored cross-site scripting vulnerability. An unauthenticated and remote attacker could insert crafted HTML into the editor resulting in arbitrary JavaScript execution in another user's browser.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/advisories/GHSA-w7jx-j77m-wp65; https://github.com/tinymce/tinymce/security/advisories/GHSA-w7jx-j77m-wp65; https://vulncheck.com/advisories/vc-advisory-GHSA-w7jx-j77m-wp65
CVE: CVE-2023-46739
Published: 2024-01-03
Description: CubeFS is an open-source cloud-native file storage system. A vulnerability was found during in the CubeFS master component in versions prior to 3.3.1 that could allow an untrusted attacker to steal user passwords by carrying out a timing attack. The root case of the vulnerability was that CubeFS used raw string comparison of passwords. The vulnerable part of CubeFS was the UserService of the master component. The UserService gets instantiated when starting the server of the master component. The issue has been patched in v3.3.1. For impacted users, there is no other way to mitigate the issue besides upgrading.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-203
References: https://github.com/cubefs/cubefs/commit/6a0d5fa45a77ff20c752fa9e44738bf5d86c84bd; https://github.com/cubefs/cubefs/security/advisories/GHSA-8579-7p32-f398; https://github.com/cubefs/cubefs/commit/6a0d5fa45a77ff20c752fa9e44738bf5d86c84bd
CVE: CVE-2023-46740
Published: 2024-01-03
Description: CubeFS is an open-source cloud-native file storage system. Prior to version 3.3.1, CubeFS used an insecure random string generator to generate user-specific, sensitive keys used to authenticate users in a CubeFS deployment. This could allow an attacker to predict and/or guess the generated string and impersonate a user thereby obtaining higher privileges. When CubeFS creates new users, it creates a piece of sensitive information for the user called the “accessKey”. To create the "accesKey", CubeFS uses an insecure string generator which makes it easy to guess and thereby impersonate the created user. An attacker could leverage the predictable random string generator and guess a users access key and impersonate the user to obtain higher privileges. The issue has been fixed in v3.3.1. There is no other mitigation than to upgrade.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-330
References: https://github.com/cubefs/cubefs/commit/8555c6402794cabdf2cc025c8bea1576122c07ba; https://github.com/cubefs/cubefs/security/advisories/GHSA-4248-p65p-hcrm; https://github.com/cubefs/cubefs/commit/8555c6402794cabdf2cc025c8bea1576122c07ba
CVE: CVE-2023-46741
Published: 2024-01-03
Description: CubeFS is an open-source cloud-native file storage system. A vulnerability was found in CubeFS prior to version 3.3.1 that could allow users to read sensitive data from the logs which could allow them escalate privileges. CubeFS leaks configuration keys in plaintext format in the logs. These keys could allow anyone to carry out operations on blobs that they otherwise do not have permissions for. For example, an attacker that has succesfully retrieved a secret key from the logs can delete blogs from the blob store. The attacker can either be an internal user with limited privileges to read the log, or they can be an external user who has escalated privileges sufficiently to access the logs. The vulnerability has been patched in v3.3.1. There is no other mitigation than upgrading.

CVSS Score: 4.8 (MEDIUM)
CWE: CWE-200
References: https://github.com/cubefs/cubefs/commit/972f0275ee8d5dbba4b1530da7c145c269b31ef5; https://github.com/cubefs/cubefs/security/advisories/GHSA-8h2x-gr2c-c275; https://github.com/cubefs/cubefs/commit/972f0275ee8d5dbba4b1530da7c145c269b31ef5
CVE: CVE-2023-46742
Published: 2024-01-03
Description: CubeFS is an open-source cloud-native file storage system. CubeFS prior to version 3.3.1 was found to leak users secret keys and access keys in the logs in multiple components. When CubeCS creates new users, it leaks the users secret key. This could allow a lower-privileged user with access to the logs to retrieve sensitive information and impersonate other users with higher privileges than themselves. The issue has been patched in v3.3.1. There is no other mitigation than upgrading CubeFS.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-532
References: https://github.com/cubefs/cubefs/commit/8dccce6ac8dff3db44d7e9074094c7303a5ff5dd; https://github.com/cubefs/cubefs/security/advisories/GHSA-vwch-g97w-hfg2; https://github.com/cubefs/cubefs/commit/8dccce6ac8dff3db44d7e9074094c7303a5ff5dd
CVE: CVE-2023-50253
Published: 2024-01-03
Description: Laf is a cloud development platform. In the Laf version design, the log uses communication with k8s to quickly retrieve logs from the container without the need for additional storage. However, in version 1.0.0-beta.13 and prior, this interface does not verify the permissions of the pod, which allows authenticated users to obtain any pod logs under the same namespace through this method, thereby obtaining sensitive information printed in the logs. As of time of publication, no known patched versions exist.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-200, CWE-532
References: https://github.com/labring/laf/pull/1468; https://github.com/labring/laf/security/advisories/GHSA-g9c8-wh35-g75f; https://github.com/labring/laf/pull/1468
CVE: CVE-2023-6004
Published: 2024-01-03
Description: A flaw was found in libssh. By utilizing the ProxyCommand or ProxyJump feature, users can exploit unchecked hostname syntax on the client. This issue may allow an attacker to inject malicious code into the command of the features mentioned through the hostname parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-74, CWE-74
References: https://access.redhat.com/errata/RHSA-2024:2504; https://access.redhat.com/errata/RHSA-2024:3233; https://access.redhat.com/security/cve/CVE-2023-6004
CVE: CVE-2024-0217
Published: 2024-01-03
Description: A use-after-free flaw was found in PackageKitd. In some conditions, the order of cleanup mechanics for a transaction could be impacted. As a result, some memory access could occur on memory regions that were previously freed. Once freed, a memory region can be reused for other allocations and any previously stored data in this memory region is considered lost.
CVSS Score: 3.3 (LOW)
CWE: CWE-416, CWE-416
References: https://access.redhat.com/security/cve/CVE-2024-0217; https://bugzilla.redhat.com/show_bug.cgi?id=2256624; https://github.com/PackageKit/PackageKit/commit/64278c9127e3333342b56ead99556161f7e86f79
CVE: CVE-2024-21622
Published: 2024-01-03
Description: Craft is a content management system. This is a potential moderate impact, low complexity privilege escalation vulnerability in Craft starting in 3.x prior to 3.9.6 and 4.x prior to 4.4.16 with certain user permissions setups. This has been fixed in Craft 4.4.16 and Craft 3.9.6. Users should ensure they are running at least those versions.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-269
References: https://github.com/craftcms/cms/blob/develop/CHANGELOG.md#4511---2023-11-16; https://github.com/craftcms/cms/blob/v3/CHANGELOG.md#396---2023-11-16; https://github.com/craftcms/cms/commit/76caf9af07d9964be0fd362772223be6a5f5b6aa
CVE: CVE-2024-21631
Published: 2024-01-03
Description: Vapor is an HTTP web framework for Swift. Prior to version 4.90.0, Vapor's `vapor_urlparser_parse` function uses `uint16_t` indexes when parsing a URI's components, which may cause integer overflows when parsing untrusted inputs. This vulnerability does not affect Vapor directly but could impact applications relying on the URI type for validating user input. The URI type is used in several places in Vapor. A developer may decide to use URI to represent a URL in their application (especially if that URL is then passed to the HTTP Client) and rely on its public properties and methods. However, URI may fail to properly parse a valid (albeit abnormally long) URL, due to string ranges being converted to 16-bit integers. An attacker may use this behavior to trick the application into accepting a URL to an untrusted destination. By padding the port number with zeros, an attacker can cause an integer overflow to occur when the URL authority is parsed and, as a result, spoof the host. Version 4.90.0 contains a patch for this issue. As a workaround, validate user input before parsing as a URI or, if possible, use Foundation's `URL` and `URLComponents` utilities.

CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20, CWE-190, CWE-1104, CWE-190
References: https://github.com/vapor/vapor/commit/6db3d917b5ce5024a84eb265ef[PII_REDACTED]5d70; https://github.com/vapor/vapor/security/advisories/GHSA-r6r4-5pr8-gjcp; https://github.com/vapor/vapor/commit/6db3d917b5ce5024a84eb265ef[PII_REDACTED]5d70
CVE: CVE-2024-21633
Published: 2024-01-03
Description: Apktool is a tool for reverse engineering Android APK files. In versions 2.9.1 and prior, Apktool infers resource files' output path according to their resource names which can be manipulated by attacker to place files at desired location on the system Apktool runs on. Affected environments are those in which an attacker may write/overwrite any file that user has write access, and either user name is known or cwd is under user folder. Commit d348c43b24a9de350ff6e5bd610545a10c1fc712 contains a patch for this issue.
CVSS Score: 7.8 (HIGH)
CWE: CWE-22
References: https://github.com/iBotPeaches/Apktool/commit/d348c43b24a9de350ff6e5bd610545a10c1fc712; https://github.com/iBotPeaches/Apktool/security/advisories/GHSA-2hqv-2xv4-5h5w; https://github.com/iBotPeaches/Apktool/commit/d348c43b24a9de350ff6e5bd610545a10c1fc712
CVE: CVE-2023-46929
Published: 2024-01-03
Description: An issue discovered in GPAC 2.3-DEV-rev605-gfc9e29089-master in MP4Box in gf_avc_change_vui /afltest/gpac/src/media_tools/av_parsers.c:6872:55 allows attackers to crash the application.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://github.com/gpac/gpac/commit/4248def5d24325aeb0e35cacde3d56c9411816a6; https://github.com/gpac/gpac/issues/2662; https://github.com/gpac/gpac/commit/4248def5d24325aeb0e35cacde3d56c9411816a6
CVE: CVE-2023-50090
Published: 2024-01-03
Description: Arbitrary File Write vulnerability in the saveReportFile method of ureport2 2.2.9 and before allows attackers to write arbitrary files and run arbitrary commands via crafted POST request.
CVSS Score: 9.8 (CRITICAL)
References: https://lemono.fun/thoughts/UReport2-RCE.html; https://github.com/advisories/GHSA-445x-c8qq-qfr9; https://lemono.fun/thoughts/UReport2-RCE.html
CVE: CVE-2023-5879
Published: 2024-01-03
Description: Users’ product account authentication data was stored in clear text in The Genie Company Aladdin Connect Mobile Application Version 5.65 Build 2075 (and below) on Android Devices. This allows the attacker, with access to the android device, to potentially retrieve users' clear text authentication credentials.

CVSS Score: 6.8 (MEDIUM)
CWE: CWE-922, CWE-922
References: https://www.rapid7.com/blog/post/2024/01/03/genie-aladdin-connect-retrofit-garage-door-opener-multiple-vulnerabilities/; https://www.rapid7.com/blog/post/2024/01/03/genie-aladdin-connect-retrofit-garage-door-opener-multiple-vulnerabilities/
CVE: CVE-2023-5880
Published: 2024-01-03
Description: When the Genie Company Aladdin Connect garage door opener (Retrofit-Kit Model ALDCM) is placed into configuration mode the web servers “Garage Door Control Module Setup” page is vulnerable to XSS via a broadcast SSID name containing malicious code with client side Java Script and/or HTML. This allows the attacker to inject malicious code with client side Java Script and/or HTML into the users' web browser. 

CVSS Score: 8.8 (HIGH)
CWE: CWE-79, CWE-79
References: https://www.rapid7.com/blog/post/2024/01/03/genie-aladdin-connect-retrofit-garage-door-opener-multiple-vulnerabilities/; https://www.rapid7.com/blog/post/2024/01/03/genie-aladdin-connect-retrofit-garage-door-opener-multiple-vulnerabilities/
CVE: CVE-2023-5881
Published: 2024-01-03
Description: Unauthenticated access permitted to web interface page The Genie Company Aladdin Connect (Retrofit-Kit Model ALDCM) "Garage Door Control Module Setup" and modify the Garage door's SSID settings. 




CVSS Score: 8.2 (HIGH)
CWE: CWE-306, CWE-306
References: https://www.rapid7.com/blog/post/2024/01/03/genie-aladdin-connect-retrofit-garage-door-opener-multiple-vulnerabilities/; https://www.rapid7.com/blog/post/2024/01/03/genie-aladdin-connect-retrofit-garage-door-opener-multiple-vulnerabilities/
CVE: CVE-2023-49442
Published: 2024-01-03
Description: Deserialization of Untrusted Data in jeecgFormDemoController in JEECG 4.0 and earlier allows attackers to run arbitrary code via crafted POST request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502, CWE-502
References: https://lemono.fun/thoughts/JEECG-RCE.html; https://lemono.fun/thoughts/JEECG-RCE.html
CVE: CVE-2023-6338
Published: 2024-01-03
Description: Uncontrolled search path vulnerabilities were reported in the Lenovo Universal Device Client (UDC) that could allow an attacker with local access to execute code with elevated privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://support.lenovo.com/us/en/product_security/LEN-121183; https://support.lenovo.com/us/en/product_security/LEN-121183
CVE: CVE-2023-6540
Published: 2024-01-03
Description: A vulnerability was reported in the Lenovo Browser Mobile and Lenovo Browser HD Apps for Android that could allow an attacker to craft a payload that could result in the disclosure of sensitive information.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-94
References: https://iknow.lenovo.com.cn/detail/419251; https://iknow.lenovo.com.cn/detail/419251
CVE: CVE-2023-52140
Published: 2024-01-03
Description: Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2023. Notes: none.
CVE: CVE-2023-52141
Published: 2024-01-03
Description: Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2023. Notes: none.
CVE: CVE-2023-50256
Published: 2024-01-03
Description: Froxlor is open source server administration software. Prior to version 2.1.2, it was possible to submit the registration form with the essential fields, such as the username and password, left intentionally blank. This inadvertent omission allowed for a bypass of the mandatory field requirements (e.g. surname, company name) established by the system. Version 2.1.2 fixes this issue.

CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://github.com/Froxlor/Froxlor/commit/4b1846883d4828962add91bd844596d89a9c7cac; https://github.com/Froxlor/Froxlor/security/advisories/GHSA-625g-fm5w-w7w4; https://user-images.githubusercontent.com/80028768/289675319-81ae8ebe-1308-4ee3-bedb-43cdc40da474.mp4
CVE: CVE-2023-5138
Published: 2024-01-03
Description: Glitch detection is not enabled by default for the CortexM33 core in Silicon Labs secure vault high parts EFx32xG2xB, except EFR32xG21B.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-1319, CWE-909
References: https://community.silabs.com/069Vm0000004f6DIAQ; https://github.com/SiliconLabs/gecko_sdk; https://community.silabs.com/069Vm0000004f6DIAQ
CVE: CVE-2024-21634
Published: 2024-01-03
Description: Amazon Ion is a Java implementation of the Ion data notation. Prior to version 1.10.5, a potential denial-of-service issue exists in `ion-java` for applications that use `ion-java` to deserialize Ion text encoded data, or deserialize Ion text or binary encoded data into the `IonValue` model and then invoke certain `IonValue` methods on that in-memory representation. An actor could craft Ion data that, when loaded by the affected application and/or processed using the `IonValue` model, results in a `StackOverflowError` originating from the `ion-java` library. The patch is included in `ion-java` 1.10.5. As a workaround, do not load data which originated from an untrusted source or that could have been tampered with.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://github.com/amazon-ion/ion-java/security/advisories/GHSA-264p-99wq-f4j6; https://github.com/amazon-ion/ion-java/security/advisories/GHSA-264p-99wq-f4j6; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2024-20802
Published: 2024-01-04
Description: Improper access control vulnerability in Samsung DeX prior to SMR Jan-2024 Release 1 allows owner to access other users&#39; notification in a multi-user environment.
CVSS Score: 4.6 (MEDIUM)
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=01; https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=01
CVE: CVE-2024-20803
Published: 2024-01-04
Description: Improper authentication vulnerability in Bluetooth pairing process prior to SMR Jan-2024 Release 1 allows remote attackers to establish pairing process without user interaction.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-287
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=01; https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=01
CVE: CVE-2024-20804
Published: 2024-01-04
Description: Path traversal vulnerability in FileUriConverter of MyFiles prior to SMR Jan-2024 Release 1 in Android 11 and Android 12, and version 14.5.00.21 in Android 13 allows local attackers to write arbitrary file.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-22
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=01; https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=01
CVE: CVE-2024-20805
Published: 2024-01-04
Description: Path traversal vulnerability in ZipCompressor of MyFiles prior to SMR Jan-2024 Release 1 in Android 11 and Android 12, and version 14.5.00.21 in Android 13 allows local attackers to write arbitrary file.
CVSS Score: 3.3 (LOW)
CWE: CWE-22, CWE-22
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=01; https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=01
CVE: CVE-2024-20806
Published: 2024-01-04
Description: Improper access control in Notification service prior to SMR Jan-2024 Release 1 allows local attacker to access notification data.
CVSS Score: 6.2 (MEDIUM)
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=01; https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=01
CVE: CVE-2024-20807
Published: 2024-01-04
Description: Implicit intent hijacking vulnerability in Samsung Email prior to version 6.1.90.16 allows local attacker to get sensitive information.
CVSS Score: 3.3 (LOW)
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=01; https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=01
CVE: CVE-2024-20808
Published: 2024-01-04
Description: Improper access control vulnerability in Nearby device scanning prior version 11.1.14.7 allows local attacker to access data.
CVSS Score: 4.0 (MEDIUM)
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=01; https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=01
CVE: CVE-2024-20809
Published: 2024-01-04
Description: Improper access control vulnerability in Nearby device scanning prior version 11.1.14.7 allows local attacker to access data.
CVSS Score: 4.0 (MEDIUM)
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=01; https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=01
CVE: CVE-2024-0222
Published: 2024-01-04
Description: Use after free in ANGLE in Google Chrome prior to 120.0.6099.199 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop.html; https://crbug.com/1501798; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AYONA2XSNFMXLAW4IHLFI5UVV3QRNG5K/
CVE: CVE-2024-0223
Published: 2024-01-04
Description: Heap buffer overflow in ANGLE in Google Chrome prior to 120.0.6099.199 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVSS Score: 8.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop.html; https://crbug.com/1505009; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AYONA2XSNFMXLAW4IHLFI5UVV3QRNG5K/
CVE: CVE-2024-0224
Published: 2024-01-04
Description: Use after free in WebAudio in Google Chrome prior to 120.0.6099.199 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop.html; https://crbug.com/1505086; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AYONA2XSNFMXLAW4IHLFI5UVV3QRNG5K/
CVE: CVE-2024-0225
Published: 2024-01-04
Description: Use after free in WebGPU in Google Chrome prior to 120.0.6099.199 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop.html; https://crbug.com/1506923; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AYONA2XSNFMXLAW4IHLFI5UVV3QRNG5K/