PAN-SA-2024-0016: Chromium: Monthly Vulnerability Updates (Severity: HIGH)
First published: Wed Nov 13 2024(Updated: )
Palo Alto Networks incorporated the following Chromium security fixes into its products: * https://chromereleases.googleblog.com/2024/10/stable-channel-update-for-desktop_15.html * https://chromereleases.googleblog.com/2024/10/stable-channel-update-for-desktop_22.html * https://chromereleases.googleblog.com/2024/10/stable-channel-update-for-desktop_29.html * https://chromereleases.googleblog.com/2024/11/stable-channel-update-for-desktop.html
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Palo Alto Networks Prisma Access Browser | <130.59.2920.7=unspecified |
Remedy
CVE-2024-9954, CVE-2024-9955, CVE-2024-9956, CVE-2024-9957, CVE-2024-9958, CVE-2024-9959, CVE-2024-9960, CVE-2024-9961, CVE-2024-9962, CVE-2024-9963, CVE-2024-9964, CVE-2024-9965, and CVE-2024-9966 are fixed in Prisma Access Browser 130.59.2920.7, and all later Prisma Access Browser versions. CVE-2024-10229, CVE-2024-10230, and CVE-2024-10231 are fixed in Prisma Access Browser 130.70.2920.8, and all later Prisma Access Browser versions. CVE-2024-10487 and CVE-2024-10488 are fixed in Prisma Access Browser 130.92.2920.10, and all later Prisma Access Browser versions. CVE-2024-10826 and CVE-2024-10827 are fixed in Prisma Access Browser 130.117.2920.13, and all later Prisma Access Browser versions.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/paloaltonetworks-latest
- source/Palo Alto Networks
- agent/title
- agent/type
- agent/references
- agent/first-publish-date
- agent/severity
- agent/remedy
- agent/last-modified-date
- agent/description
- agent/event
- agent/softwarecombine
- agent/tags
- collector/paloaltonetworks-api
- agent/software-canonical-lookup
- vendor/palo alto networks
- canonical/palo alto networks prisma access browser
- version/palo alto networks prisma access browser/unspecified