Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2022:0047-1

Опубликовано: 20 фев. 2022
Источник: suse-cvrf

Описание

Security update for opera

This update for opera fixes the following issues:

Update to 83.0.4254.27

  • CHR-8737 Update chromium on desktop-stable-97-4254 to 97.0.4692.99

  • DNA-96336 [Mac] Translate new network installer slogan

  • DNA-96678 Add battery level monitoring capability to powerSavePrivate

  • DNA-96939 Crash at opera::ExternalVideoService::MarkAsManuallyClosed()

  • DNA-97276 Enable #static-tab-audio-indicator on all streams

  • The update to chromium 97.0.4692.99 fixes following issues: CVE-2022-0289, CVE-2022-0290, CVE-2022-0291, CVE-2022-0292, CVE-2022-0293, CVE-2022-0294, CVE-2022-0295, CVE-2022-0296, CVE-2022-0297, CVE-2022-0298, CVE-2022-0300, CVE-2022-0301, CVE-2022-0302, CVE-2022-0304, CVE-2022-0305, CVE-2022-0306, CVE-2022-0307, CVE-2022-0308, CVE-2022-0309, CVE-2022-0310, CVE-2022-0311

Update to 83.0.4254.19

  • DNA-96079 Turn on #automatic-video-popout on developer

  • DNA-97070 Opera 83 translations

  • DNA-97119 [LastCard] Stop showing used burner cards

  • DNA-97131 Enable automatic-video-popout on all streams from O84 on

  • DNA-97257 Crash at views::ImageButton::SetMinimumImageSize(gfx::Size const&)

  • DNA-97259 Promote O83 to stable

  • Complete Opera 83.0 changelog at: https://blogs.opera.com/desktop/changelog-for-83/

  • Update to 83.0.4254.16

    • DNA-96968 Fix alignment of the 'Advanced' button in Settings

  • Update to 83.0.4254.14

    • CHR-8701 Update chromium on desktop-stable-97-4254 to 97.0.4692.45
    • CHR-8713 Update chromium on desktop-stable-97-4254 to 97.0.4692.56
    • CHR-8723 Update chromium on desktop-stable-97-4254 to 97.0.4692.71
    • DNA-96780 Crash at ui::NativeTheme::RemoveObserver(ui::NativeThemeObserver*)
    • DNA-96822 Tab close resize behavior change
    • DNA-96861 Create Loomi Options menu
    • DNA-96904 Support Win11 snap layout popup
    • DNA-96951 Tab close animation broken
    • DNA-96991 Tab X button doesn’t work correctly
    • DNA-97027 Incorrect tab size after tab close

  • The update to chromium 97.0.4692.71 fixes following issues: CVE-2022-0096, CVE-2022-0097, CVE-2022-0098, CVE-2022-0099, CVE-2022-0100, CVE-2022-0101, CVE-2022-0102, CVE-2022-0103, CVE-2022-0104, CVE-2022-0105, CVE-2022-0105, CVE-2022-0106, CVE-2022-0107, CVE-2022-0108, CVE-2022-0109, CVE-2022-0110, CVE-2022-0111, CVE-2022-0111, CVE-2022-0112, CVE-2022-0113, CVE-2022-0114, CVE-2022-0115, CVE-2022-0116, CVE-2022-0117, CVE-2022-0118, CVE-2022-0120

  • Update to version 82.0.4227.58

    • DNA-96780 Crash at ui::NativeTheme::RemoveObserver(ui::NativeThemeObserver*)
    • DNA-96890 Settings default browser not working for current user on Windows 7

  • Update to version 82.0.4227.43

    • CHR-8705 Update chromium on desktop-stable-96-4227 to 96.0.4664.110
    • DNA-93284 Unstable obj/opera/desktop/common/installer_rc_generated/installer.res
    • DNA-95908 Interstitial/internal pages shown as NOT SECURE after visiting http site
    • DNA-96404 Opera doesn’t show on main screen when second screen is abruptly disconnected

  • The update to chromium 96.0.4664.110 fixes following issues: CVE-2021-4098, CVE-2021-4099, CVE-2021-4100, CVE-2021-4101, CVE-2021-4102

  • Update to version 82.0.4227.33

    • CHR-8689 Update chromium on desktop-stable-96-4227 to 96.0.4664.93
    • DNA-96559 Tooltip popup looks bad in dark theme
    • DNA-96570 [Player] Tidal logging in via PLAY doesn’t work
    • DNA-96594 Unnecessary extra space in fullscreen mode on M1 Pro MacBooks
    • DNA-96649 Update Meme button
    • DNA-96676 Add Icon in the Sidebar Setup
    • DNA-96677 Add default URL

  • The update to chromium 96.0.4664.93 fixes following issues: CVE-2021-4052, CVE-2021-4053, CVE-2021-4079, CVE-2021-4054, CVE-2021-4078, CVE-2021-4055, CVE-2021-4056, CVE-2021-4057, CVE-2021-4058, CVE-2021-4059, CVE-2021-4061, CVE-2021-4062, CVE-2021-4063, CVE-2021-4064, CVE-2021-4065, CVE-2021-4066, CVE-2021-4067, CVE-2021-4068

  • Update to version 82.0.4227.23

    • DNA-95632 With new au-logic UUID is set with delay and may be not set for pb-builds (when closing fast)
    • DNA-96349 Laggy tooltip animation
    • DNA-96483 [Snap][Linux] Video not working / wrong ffmpeg snap version for Opera 82
    • DNA-96493 Create 'small' enticement in credit card autofill
    • DNA-96533 Opera 82 translations
    • DNA-96535 Make the URL configurable
    • DNA-96553 Add switch to whitelist test pages
    • DNA-96557 Links not opened from panel
    • DNA-96558 AdBlock bloks some trackers inside the panel
    • DNA-96568 [Player] Tidal in sidebar Player opens wrong site when logging in
    • DNA-96659 Siteprefs not applied after network service crash
    • DNA-96593 Promote O82 to stable

  • Complete Opera 82.0 changelog at: https://blogs.opera.com/desktop/changelog-for-82/

  • Update to version 82.0.4227.13

    • CHR-8668 Update chromium on desktop-stable-96-4227 to 96.0.4664.45
    • DNA-76987 [Mac] Update desktop EULA with geolocation split
    • DNA-93388 Problem with symlinks on windows when creating file list
    • DNA-95734 Discarded Recently Closed items get revived after restart
    • DNA-96134 'Your profile has been updated' does not disappear
    • DNA-96190 Opera freezes when trying to drag expanded bookmark folder with nested subfolders
    • DNA-96223 Easy Files not working in Full Screen
    • DNA-96274 Checkout autofill shouldn't show used burner card
    • DNA-96275 Change the notification message for pausing multi-use cards
    • DNA-96295 'Video pop out' setting doesn't sync
    • DNA-96316 Highlight text wrong colour on dark mode
    • DNA-96326 Wrong translation Private Mode > Turkish
    • DNA-96351 macOS window controls are missing in full screen
    • DNA-96440 Update video URL
    • DNA-96448 add option to pin extension via rich hints
    • DNA-96453 Register user-chosen option on client-side, read on hint side
    • DNA-96454 Choosing an option from the settings menu should close the popup
    • DNA-96484 Enable AB test for a new autoupdater logic (for 50%)
    • DNA-96500 Add 'don't show me again' prefs to allowed whitelist
    • DNA-96538 Inline audiocomplete for www.mediaexpert.pl incorrectly suggested

  • The update to chromium 96.0.4664.45 fixes following issues: CVE-2021-38005, CVE-2021-38006, CVE-2021-38007, CVE-2021-38008, CVE-2021-38009, CVE-2021-38010, CVE-2021-38011, CVE-2021-38012, CVE-2021-38013, CVE-2021-38014, CVE-2021-38015, CVE-2021-38016, CVE-2021-38017, CVE-2021-38019, CVE-2021-38020, CVE-2021-38021, CVE-2021-38022

  • Update to version 81.0.4196.54

    • CHR-8644 Update chromium on desktop-stable-95-4196 to 95.0.4638.69
    • DNA-95773 ExtensionWebRequestApiTest crashes on mac
    • DNA-96062 Opera 81 translations
    • DNA-96134 “Your profile has been updated’ does not disappear
    • DNA-96274 Checkout autofill shouldn’t show used burner card
    • DNA-96275 Change the notification message for pausing multi-use cards
    • DNA-96440 Update video URL

  • The update to chromium 95.0.4638.69 fixes following issues: CVE-2021-37997, CVE-2021-37998, CVE-2021-37999, CVE-2021-37980, CVE-2021-38001, CVE-2021-38002, CVE-2021-38003, CVE-2021-38004

  • Update to version 81.0.4196.37

    • DNA-96008 Crash at content::WebContentsImpl::OpenURL(content::OpenURLParams const&)
    • DNA-96032 Closing the videoconference pop-up force leaving the meeting
    • DNA-96092 Crash at void opera::ModalDialogViews::OnWidgetClosing(opera::ModalDialog::Result)
    • DNA-96142 [Yat] Emoji icon cut off in URL for Yat

Список пакетов

openSUSE Leap 15.3 NonFree
opera-83.0.4254.27-lp153.2.33.1

Ссылки

Описание

Inappropriate implementation in Sandbox in Google Chrome prior to 94.0.4606.81 allowed a remote attacker to potentially bypass site isolation via Windows.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Use after free in Sign-In in Google Chrome prior to 95.0.4638.69 allowed a remote attacker who convinced a user to sign into Chrome to potentially exploit heap corruption via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Use after free in Garbage Collection in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Insufficient data validation in New Tab Page in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to inject arbitrary scripts or HTML in a new browser tab via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Type confusion in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Use after free in Web Transport in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Inappropriate implementation in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Insufficient policy enforcement in Autofill in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Use after free in loader in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Use after free in storage foundation in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Type confusion in V8 in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Use after free in media in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Inappropriate implementation in cache in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Inappropriate implementation in service workers in Google Chrome prior to 96.0.4664.45 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Use after free in storage foundation in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Type confusion in V8 in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Heap buffer overflow in fingerprint recognition in Google Chrome on ChromeOS prior to 96.0.4664.45 allowed a remote attacker who had compromised a WebUI renderer process to potentially perform a sandbox escape via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Out of bounds write in Swiftshader in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Inappropriate implementation in input in Google Chrome prior to 96.0.4664.45 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Insufficient policy enforcement in background fetch in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to bypass same origin policy via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Insufficient policy enforcement in iframe sandbox in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Insufficient policy enforcement in CORS in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Insufficient policy enforcement in contacts picker in Google Chrome on Android prior to 96.0.4664.45 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Inappropriate implementation in referrer in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Inappropriate implementation in WebAuthentication in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Use after free in web apps in Google Chrome prior to 96.0.4664.93 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Use after free in UI in Google Chrome on Linux prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Incorrect security UI in autofill in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to perform domain spoofing via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Heap buffer overflow in extensions in Google Chrome prior to 96.0.4664.93 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Type confusion in loader in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Use after free in file API in Google Chrome prior to 96.0.4664.93 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Heap buffer overflow in ANGLE in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Insufficient data validation in loader in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Type confusion in V8 in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Heap buffer overflow in BFCache in Google Chrome prior to 96.0.4664.93 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Use after free in developer tools in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Use after free in screen capture in Google Chrome on ChromeOS prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Use after free in autofill in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Integer underflow in ANGLE in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Use after free in window manager in Google Chrome on ChromeOS prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Insufficient data validation in new tab page in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Type confusion in V8 in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Out of bounds write in WebRTC in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via crafted WebRTC packets.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Insufficient data validation in Mojo in Google Chrome prior to 96.0.4664.110 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Use after free in Swiftshader in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Object lifecycle issue in ANGLE in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Heap buffer overflow in Swiftshader in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Use after free in V8 in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Use after free in Storage in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Inappropriate implementation in DevTools in Google Chrome prior to 97.0.4692.71 allowed an attacker who convinced a user to install a malicious extension to to potentially allow extension to escape the sandbox via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Use after free in Screen Capture in Google Chrome on Chrome OS prior to 97.0.4692.71 allowed an attacker who convinced a user to perform specific user gestures to potentially exploit heap corruption via specific user gestures.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Use after free in Sign-in in Google Chrome prior to 97.0.4692.71 allowed a remote attacker who convinced a user to perform specific user gestures to potentially exploit heap corruption via specific user gesture.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Heap buffer overflow in Media streams API in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Heap buffer overflow in Bookmarks in Google Chrome prior to 97.0.4692.71 allowed a remote attacker who convinced a user to perform specific user gesture to potentially exploit heap corruption via specific user gesture.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Type confusion in V8 in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Use after free in SwiftShader in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Heap buffer overflow in ANGLE in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Use after free in PDF Accessibility in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Use after free in Autofill in Google Chrome prior to 97.0.4692.71 allowed a remote attacker who convinced a user to perform specific user gesture to potentially exploit heap corruption via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Use after free in File Manager API in Google Chrome on Chrome OS prior to 97.0.4692.71 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Inappropriate implementation in Navigation in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Inappropriate implementation in Autofill in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to obtain potentially sensitive information via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Incorrect security UI in Autofill in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Inappropriate implementation in Navigation in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to incorrectly set origin via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Incorrect security UI in Browser UI in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to display missing URL or incorrect URL via a crafted URL.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Inappropriate implementation in Blink in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Out of bounds memory access in Blink Serial API in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page and virtual serial port driver.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Uninitialized use in File API in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Inappropriate implementation in Compositing in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Policy bypass in Blink in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Inappropriate implementation in WebShare in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially hide the contents of the Omnibox (URL bar) via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Inappropriate implementation in Passwords in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially leak cross-origin data via a malicious website.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Use after free in Safe browsing in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Use after free in Site isolation in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Inappropriate implementation in Storage in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Inappropriate implementation in Fenced Frames in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Use after free in Web packaging in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Inappropriate implementation in Push messaging in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Use after free in Omnibox in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who convinced the user to engage is specific user interactions to potentially exploit heap corruption via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Use after free in Printing in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who convinced the user to engage is specific user interactions to potentially exploit heap corruption via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Use after free in Vulkan in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Use after free in Scheduling in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Use after free in Text Input Method Editor in Google Chrome on Android prior to 97.0.4692.99 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Heap buffer overflow in DevTools in Google Chrome prior to 97.0.4692.99 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Use after free in Omnibox in Google Chrome prior to 97.0.4692.99 allowed an attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Use after free in Bookmarks in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Inappropriate implementation in Service Worker API in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Heap buffer overflow in PDFium in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Use after free in Optimization Guide in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Use after free in Data Transfer in Google Chrome on Chrome OS prior to 97.0.4692.99 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Inappropriate implementation in Autofill in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Heap buffer overflow in Task Manager in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially exploit heap corruption via specific user interactions.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки

Описание

Heap buffer overflow in Task Manager in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page.

Затронутые продукты
openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1
Ссылки
Уязвимость openSUSE-SU-2022:0047-1