Lucene search
HistoryAug 21, 2024 - 9:15 p.m.
CVE-2024-7967
heap buffer overflow
google chrome
fonts
remote attacker
html page
heap corruption
vulnerability
security severity high
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
26.9%
Heap buffer overflow in Fonts in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Affected configurations
Node
googlechromeRange<128.0.6613.84
Related
cve
cve
CVE-2024-7967
2024-08-21 21:15:09
cvelist
cvelist
CVE-2024-7967
2024-08-21 20:20:23
wolfi
wolfi
CVE-2024-7967 vulnerabilities
2024-09-19 21:18:36
vulnrichment
vulnrichment
CVE-2024-7967
2024-08-21 20:20:23
debiancve
debiancve
CVE-2024-7967
2024-08-21 21:15:09
mscve
mscve
Chromium: CVE-2024-7967 Heap buffer overflow in Fonts
2024-08-22 07:00:00
alpinelinux
alpinelinux
CVE-2024-7967
2024-08-21 21:15:09
osv
osv
CVE-2024-7967
2024-08-21 21:15:09
Security update for chromium
2024-08-23 09:15:52
Security update for chromium
2024-08-23 09:15:52
chrome
chrome
Stable Channel Update for ChromeOS / ChromeOS Flex
2024-09-09 00:00:00
Stable Channel Update for Desktop
2024-08-21 00:00:00
nessus
nessus
Google Chrome < 128.0.6613.84 Multiple Vulnerabilities
2024-08-21 00:00:00
Google Chrome < 128.0.6613.84 Multiple Vulnerabilities
2024-08-21 00:00:00
redos
redos
ROS-20240917-01
2024-09-17 00:00:00
openvas
openvas
openSUSE: Security Advisory for chromium (openSUSE-SU-2024:0258-1)
2024-08-24 00:00:00
Google Chrome Security Update (stable-channel-update-for-desktop_21-2024-08) - Mac OS X
2024-08-22 00:00:00
Debian: Security Advisory (DSA-5757-1)
2024-08-26 00:00:00
freebsd
freebsd
chromium -- multiple security fixes
2024-08-21 00:00:00
kaspersky
kaspersky
KLA71709 Multiple vulnerability in Google Chrome
2024-07-22 00:00:00
KLA71827 Multiple vulnerabilities in Microsoft Browser
2024-08-22 00:00:00
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
26.9%
Related for NVD:CVE-2024-7967