Lucene search

K
osvGoogleOSV:CVE-2024-4331
HistoryMay 01, 2024 - 1:15 p.m.

CVE-2024-4331

2024-05-0113:15:52
Google
osv.dev
2
cve-2024-4331
google chrome
picture in picture
heap corruption
remote attacker
crafted html page
chromium
high severity
software

6.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.4%

Use after free in Picture In Picture in Google Chrome prior to 124.0.6367.118 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)