latest mozilla and google chrome reported vulns

Signed-off-by: Weston Steimel <[email protected]>
anchore · May 23, 2024 · f6e25d0 · f6e25d0
1 parent 32b9116
commit f6e25d0
Show file tree

Hide file tree

Showing 9 changed files with 306 additions and 0 deletions.
diff --git a/data/anchore/2024/CVE-2024-4947.json b/data/anchore/2024/CVE-2024-4947.json
@@ -0,0 +1,34 @@
+{
+  "additionalMetadata": {
+    "cna": "chrome",
+    "cveId": "CVE-2024-4947",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_15.html",
+      "https://issues.chromium.org/issues/340221135"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "cpes": [
+          "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"
+        ],
+        "product": "Chrome",
+        "vendor": "Google",
+        "versions": [
+          {
+            "lessThan": "125.0.6422.60",
+            "status": "affected",
+            "version": "0",
+            "versionType": "custom"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2024/CVE-2024-4948.json b/data/anchore/2024/CVE-2024-4948.json
@@ -0,0 +1,34 @@
+{
+  "additionalMetadata": {
+    "cna": "chrome",
+    "cveId": "CVE-2024-4948",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_15.html",
+      "https://issues.chromium.org/issues/333414294"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "cpes": [
+          "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"
+        ],
+        "product": "Chrome",
+        "vendor": "Google",
+        "versions": [
+          {
+            "lessThan": "125.0.6422.60",
+            "status": "affected",
+            "version": "0",
+            "versionType": "custom"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2024/CVE-2024-4949.json b/data/anchore/2024/CVE-2024-4949.json
@@ -0,0 +1,34 @@
+{
+  "additionalMetadata": {
+    "cna": "chrome",
+    "cveId": "CVE-2024-4949",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_15.html",
+      "https://issues.chromium.org/issues/326607001"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "cpes": [
+          "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"
+        ],
+        "product": "Chrome",
+        "vendor": "Google",
+        "versions": [
+          {
+            "lessThan": "125.0.6422.60",
+            "status": "affected",
+            "version": "0",
+            "versionType": "custom"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2024/CVE-2024-4950.json b/data/anchore/2024/CVE-2024-4950.json
@@ -0,0 +1,34 @@
+{
+  "additionalMetadata": {
+    "cna": "chrome",
+    "cveId": "CVE-2024-4950",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_15.html",
+      "https://issues.chromium.org/issues/40065403"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "cpes": [
+          "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"
+        ],
+        "product": "Chrome",
+        "vendor": "Google",
+        "versions": [
+          {
+            "lessThan": "125.0.6422.60",
+            "status": "affected",
+            "version": "0",
+            "versionType": "custom"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2024/CVE-2024-5022.json b/data/anchore/2024/CVE-2024-5022.json
@@ -0,0 +1,34 @@
+{
+  "additionalMetadata": {
+    "cna": "mozilla",
+    "cveId": "CVE-2024-5022",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://bugzilla.mozilla.org/show_bug.cgi?id=1874560",
+      "https://www.mozilla.org/security/advisories/mfsa2024-24/"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "cpes": [
+          "cpe:2.3:a:mozilla:firefox_focus:*:*:*:*:*:iphone_os:*:*"
+        ],
+        "product": "Focus for iOS",
+        "vendor": "Mozilla",
+        "versions": [
+          {
+            "lessThan": "126",
+            "status": "affected",
+            "version": "0",
+            "versionType": "custom"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2024/CVE-2024-5157.json b/data/anchore/2024/CVE-2024-5157.json
@@ -0,0 +1,34 @@
+{
+  "additionalMetadata": {
+    "cna": "chrome",
+    "cveId": "CVE-2024-5157",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_21.html",
+      "https://issues.chromium.org/issues/336012573"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "cpes": [
+          "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"
+        ],
+        "product": "Chrome",
+        "vendor": "Google",
+        "versions": [
+          {
+            "lessThan": "125.0.6422.76",
+            "status": "affected",
+            "version": "0",
+            "versionType": "custom"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2024/CVE-2024-5158.json b/data/anchore/2024/CVE-2024-5158.json
@@ -0,0 +1,34 @@
+{
+  "additionalMetadata": {
+    "cna": "chrome",
+    "cveId": "CVE-2024-5158",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_21.html",
+      "https://issues.chromium.org/issues/338908243"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "cpes": [
+          "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"
+        ],
+        "product": "Chrome",
+        "vendor": "Google",
+        "versions": [
+          {
+            "lessThan": "125.0.6422.76",
+            "status": "affected",
+            "version": "0",
+            "versionType": "custom"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2024/CVE-2024-5159.json b/data/anchore/2024/CVE-2024-5159.json
@@ -0,0 +1,34 @@
+{
+  "additionalMetadata": {
+    "cna": "chrome",
+    "cveId": "CVE-2024-5159",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_21.html",
+      "https://issues.chromium.org/issues/335613092"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "cpes": [
+          "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"
+        ],
+        "product": "Chrome",
+        "vendor": "Google",
+        "versions": [
+          {
+            "lessThan": "125.0.6422.76",
+            "status": "affected",
+            "version": "0",
+            "versionType": "custom"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2024/CVE-2024-5160.json b/data/anchore/2024/CVE-2024-5160.json
@@ -0,0 +1,34 @@
+{
+  "additionalMetadata": {
+    "cna": "chrome",
+    "cveId": "CVE-2024-5160",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_21.html",
+      "https://issues.chromium.org/issues/338161969"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "cpes": [
+          "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"
+        ],
+        "product": "Chrome",
+        "vendor": "Google",
+        "versions": [
+          {
+            "lessThan": "125.0.6422.76",
+            "status": "affected",
+            "version": "0",
+            "versionType": "custom"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}