GoogleOSV:CVE-2024-4761

HistoryMay 14, 2024 - 4:17 p.m.

CVE-2024-4761

2024-05-1416:17:35

Google

osv.dev

google chrome

out of bounds write

remote attacker

crafted html page

chromium

security severity

high

software

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

5.5

Confidence

Low

EPSS

0.002

Percentile

61.2%

JSON

Out of bounds write in V8 in Google Chrome prior to 124.0.6367.207 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High)

References

chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_13.html

issues.chromium.org/issues/339458194

lists.fedoraproject.org/archives/list/[email protected]/message/6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN/

lists.fedoraproject.org/archives/list/[email protected]/message/NTSN22LNYXMWHVTYNOYQVOY7VDZFHENQ/

lists.fedoraproject.org/archives/list/[email protected]/message/WSUWM73ZCXTN62AT2REYQDD5ZKPFMDZD/

security-tracker.debian.org/tracker/CVE-2024-4761

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

5.5

Confidence

Low

EPSS

0.002

Percentile

61.2%

JSON

Related for OSV:CVE-2024-4761