[FREEBSD:C80CE2DD-E831-11EC-BCD2-3065EC8FD3EC] chromium -- multiple vulnerabilities

Severity Critical

Affected Packages 1

CVEs 4

Chrome Releases reports:

  This release contains 7 security fixes, including:

    [1326210] High CVE-2022-2007: Use after free in WebGPU. Reported by David Manouchehri on 2022-05-17
    [1317673] High CVE-2022-2008: Out of bounds memory access in WebGL. Reported by khangkito - Tran Van Khang (VinCSS) on 2022-04-19
    [1325298] High CVE-2022-2010: Out of bounds read in compositing. Reported by Mark Brand of Google Project Zero on 2022-05-13
    [1330379] High CVE-2022-2011: Use after free in ANGLE. Reported by SeongHwan Park (SeHwa) on 2022-05-31

Package	Affected Version
pkg:freebsd/chromium	< 102.0.5005.115

ID

FREEBSD:C80CE2DD-E831-11EC-BCD2-3065EC8FD3EC

Severity

critical

Severity from

CVE-2022-2010

URL

http://vuxml.freebsd.org/freebsd/c80ce2dd-e831-11ec-bcd2-3065ec8fd3ec.html

Published

2022-06-09T00:00:00
(2 years ago)

Modified

2022-06-09T00:00:00
(2 years ago)

Rights

FreeBSD VuXML Security Team

Other Advisories

Source	# ID	Name	URL
FreeBSD VuXML			https://chromereleases.googleblog.com/2022/06/stable-channel-update-for-desktop.html

Type	Package URL	Namespace	Name / Product	Version	Distribution / Platform	Arch	Patch / Fix
Affected	pkg:freebsd/chromium		chromium	< 102.0.5005.115

# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	Exploits	PoC	Pubblication Date	Modification Date
# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	PoC	Pubblication Date	Modification Date