CyberSecBulletin

Chromiumembedded vulnerabilities

We track 2 vulnerabilities in Chromiumembedded products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on January 13, 2024.

2vulnerabilities
2critical
0high
0exploited
9.6average CVSS score

Latest Chromiumembedded vulnerabilities

  • 9.6 Critical severity

    cef: Out-of-bounds Read

    CVE-2024-21640Chromiumembedded

    Chromium Embedded Framework (CEF) is a simple framework for embedding Chromium-based browsers in other applications.`CefVideoConsumerOSR::OnFrameCaptured` does not check `pixel_format` properly, which leads to out-of-bounds read out of the sandbox. This vulner

  • 9.6 Critical severity

    cef: Out-of-bounds Read

    CVE-2024-21639Chromiumembedded

    CEF (Chromium Embedded Framework ) is a simple framework for embedding Chromium-based browsers in other applications. `CefLayeredWindowUpdaterOSR::OnAllocatedSharedMemory` does not check the size of the shared memory, which leads to out-of-bounds read outside