PAN-SA-2024-0011: Chromium: Monthly Vulnerability Updates (Severity: HIGH)

Q: What is the severity of PAN-SA-2024-0011?

The severity of PAN-SA-2024-0011 is determined by the specific Chromium vulnerabilities addressed but generally falls under high due to its critical nature.

Q: How do I fix PAN-SA-2024-0011?

To fix PAN-SA-2024-0011, update your Palo Alto Networks Prisma Access Browser to the latest version beyond 129.59.2896.5.

Q: Which software versions are affected by PAN-SA-2024-0011?

PAN-SA-2024-0011 affects Prisma Access Browser versions up to 129.59.2896.5 and including version 0.

Q: Are there any known exploits for PAN-SA-2024-0011?

As of now, there are no public exploits specifically reported for PAN-SA-2024-0011.

Q: What type of vulnerabilities does PAN-SA-2024-0011 address?

PAN-SA-2024-0011 addresses multiple Chromium security vulnerabilities that could be exploited if unpatched.

Published Oct 9, 2024

Updated

Palo Alto Networks incorporated the following Chromium security fixes into its products:

- https://chromereleases.googleblog.com/2024/09/stable-channel-update-for-desktop17.html - https://chromereleases.googleblog.com/2024/09/stable-channel-update-for-desktop24.html - https://chromereleases.googleblog.com/2024/10/stable-channel-update-for-desktop.html - https://chromereleases.googleblog.com/2024/10/stable-channel-update-for-desktop8.html

Affected Software

1 affected componentFixes available

Palo Alto Networks Prisma Access Browser<129.59.2896.5, =0

129.101.2913.3

Remediation

Information

CVE-2024-8904, CVE-2024-8905, CVE-2024-8906, CVE-2024-8907, CVE-2024-8908, and CVE-2024-8909 are fixed in Prisma Access Browser 129.59.2896.5, and all later Prisma Access Browser versions. CVE-2024-9120, CVE-2024-9121, CVE-2024-9122, and CVE-2024-9123 are fixed in Prisma Access Browser 129.71.2910.1, and all later Prisma Access Browser versions. CVE-2024-7025, CVE-2024-9369, and CVE-2024-9370 are fixed in Prisma Access Browser 129.90.2910.2, and all later Prisma Access Browser versions. CVE-2024-9602 and CVE-2024-9603 are fixed in Prisma Access Browser 129.101.2913.3, and all later Prisma Access Browser versions.

Event History

Oct 9, 2024

Advisory Published

via Palo Alto Networks·04:00 PM

Frequently Asked Questions

What is the severity of PAN-SA-2024-0011?

The severity of PAN-SA-2024-0011 is determined by the specific Chromium vulnerabilities addressed but generally falls under high due to its critical nature.

How do I fix PAN-SA-2024-0011?