Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2024-4331HistoryMay 01, 2024 - 1:15 p.m.
CVE-2024-4331
2024-05-0113:15:52
Debian Security Bug Tracker
security-tracker.debian.org
17
google chrome
picture in picture
use after free
cve-2024-4331
heap corruption
high severity
unix
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
6.8
Confidence
High
EPSS
0
Percentile
10.3%
Use after free in Picture In Picture in Google Chrome prior to 124.0.6367.118 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | chromium | < 124.0.6367.118-1~deb12u1 | chromium_124.0.6367.118-1~deb12u1_all.deb |
| Debian | 11 | all | chromium | <= 120.0.6099.224-1~deb11u1 | chromium_120.0.6099.224-1~deb11u1_all.deb |
| Debian | 999 | all | chromium | < 124.0.6367.118-1 | chromium_124.0.6367.118-1_all.deb |
| Debian | 13 | all | chromium | < 124.0.6367.118-1 | chromium_124.0.6367.118-1_all.deb |
Related
ubuntucve
ubuntucve
CVE-2024-4331
2024-05-01 00:00:00
osv
osv
CGA-53m7-8qw6-29cf
2024-06-06 12:23:54
CVE-2024-4331
2024-05-01 13:15:52
chromium - security update
2024-05-02 00:00:00
alpinelinux
alpinelinux
CVE-2024-4331
2024-05-01 13:15:52
nvd
nvd
CVE-2024-4331
2024-05-01 13:15:52
veracode
veracode
Use After Free
2024-05-08 11:36:41
cvelist
cvelist
CVE-2024-4331
2024-05-01 12:50:38
cve
cve
CVE-2024-4331
2024-05-01 13:15:52
vulnrichment
vulnrichment
CVE-2024-4331
2024-05-01 12:50:38
mscve
mscve
Chromium: CVE-2024-4331 Use after free in Picture In Picture
2024-05-02 17:12:29
cgr
cgr
CVE-2024-4331 vulnerabilities
2024-05-19 03:07:16
wolfi
wolfi
CVE-2024-4331 vulnerabilities
2024-09-18 09:28:50
openvas
openvas
Google Chrome Security Update (stable-channel-update-for-desktop_30-2024-04) - Linux
2024-05-02 00:00:00
Mageia: Security Advisory (MGASA-2024-0161)
2024-05-09 00:00:00
Debian: Security Advisory (DSA-5676-1)
2024-05-02 00:00:00
debian
debian
[SECURITY] [DSA 5676-1] chromium security update
2024-05-02 07:39:14
nessus
nessus
Google Chrome < 124.0.6367.118 Multiple Vulnerabilities
2024-04-30 00:00:00
Google Chrome < 124.0.6367.118 Multiple Vulnerabilities
2024-04-30 00:00:00
Fedora 39 : chromium (2024-5483bc2adb)
2024-05-03 00:00:00
chrome
chrome
Stable Channel Update for Desktop
2024-04-30 00:00:00
kaspersky
kaspersky
KLA66425 Multiple vulnerabilities in Microsoft Browser
2024-05-02 00:00:00
KLA66424 Multiple vulnerabilities in Google Chrome
2024-04-30 00:00:00
fedora
fedora
[SECURITY] Fedora 39 Update: chromium-124.0.6367.118-1.fc39
2024-05-04 01:34:51
[SECURITY] Fedora 40 Update: chromium-124.0.6367.118-1.fc40
2024-05-03 01:50:54
[SECURITY] Fedora 40 Update: chromium-124.0.6367.155-1.fc40
2024-05-11 01:32:09
mageia
mageia
Updated chromium-browser-stable packages fix security vulnerabilities
2024-05-09 05:40:29
freebsd
freebsd
chromium -- multiple security fixes
2024-04-30 00:00:00
qt6-webengine -- Multiple vulnerabilities
2024-04-03 00:00:00
redos
redos
ROS-20240627-01
2024-06-27 00:00:00
rapid7blog
rapid7blog
Patch Tuesday - May 2024
2024-05-14 20:25:36
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
6.8
Confidence
High
EPSS
0
Percentile
10.3%
Related for DEBIANCVE:CVE-2024-4331