Lucene search
HistoryJul 16, 2024 - 11:15 p.m.
CVE-2024-3171
google chrome
use after free
accessibility
heap corruption
remote attacker
ui gestures
cve-2024-3171
medium severity
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
26.7%
Use after free in Accessibility in Google Chrome prior to 122.0.6261.57 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via specific UI gestures. (Chromium security severity: Medium)
Affected configurations
Node
googlechromeRange<122.0.6261.57
Related
cve
cve
CVE-2024-3171
2024-07-16 23:15:23
vulnrichment
vulnrichment
CVE-2024-3171
2024-07-16 22:14:02
debiancve
debiancve
CVE-2024-3171
2024-07-16 23:15:23
osv
osv
CVE-2024-3171
2024-07-16 23:15:23
cvelist
cvelist
CVE-2024-3171
2024-07-16 22:14:02
redos
redos
ROS-20240724-01
2024-07-24 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-5629-1)
2024-02-26 00:00:00
kaspersky
kaspersky
KLA64091 Multiple vulnerabilities in Google Chrome
2024-02-20 00:00:00
chrome
chrome
Stable Channel Update for Desktop
2024-02-20 00:00:00
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
26.7%
Related for NVD:CVE-2024-3171