Not Simon#PatchTuesday continues with Google Chrome: 22 security fixes, 14 were externally reported (4 high severity, 6 medium. 4 low). Object corruption is a relatively new vulnerability observed in Chrome vulnerabilities. Inappropriate implementation are a majority of the vulnerability types. No mention of exploitation in the wild. 🔗 https://chromereleases.googleblog.com/2024/04/stable-channel-update-for-desktop_16.html
Microsoft Security Response Center (MSRC) also dropped 14 security advisories because these "vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable." Click on this reply to see the original toot about Google Chrome's security advisory blog post. No mention of exploitation, no CVSSv3 scores provided.
New Microsoft Security Response Center (MSRC) security advisory for Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability CVE-2024-29991 (5.0 medium). A lot of information is revealed: attack complexity=high, and MSRC says that it would need to be used in an exploit chain for an attack. An attacker must send the user a malicious file and convince them to open it. 🔗 https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2024-29991