CVE-2024-4368

2024-05-0113:15:52

Chrome

web.nvd.nist.gov

774

vulnerability

google chrome

heap corruption

remote attacker

html page

chromium security

CVSS3

6.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

AI Score

6.5

Confidence

High

EPSS

Percentile

10.3%

JSON

Use after free in Dawn in Google Chrome prior to 124.0.6367.118 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Affected configurations

Vulners

Node

googlechromeRange<124.0.6367.118

VendorProductVersionCPE
googlechrome*cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
google	chrome	*	cpe:2.3:a:google:chrome::::::::

CNA Affected

[
  {
    "vendor": "Google",
    "product": "Chrome",
    "versions": [
      {
        "version": "124.0.6367.118",
        "status": "affected",
        "lessThan": "124.0.6367.118",
        "versionType": "custom"
      }
    ]
  }
]