CVE-2024-5157

2024-05-2216:15:10

Google

osv.dev

scheduling

remote attacker

arbitrary code

html page

chromium

high severity

7.1 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

JSON

Use after free in Scheduling in Google Chrome prior to 125.0.6422.76 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CPENameOperatorVersion
chromiumeq120.0.6099.71-1~deb12u1
chromiumeq81.0.4044.62-1
chromiumeq122.0.6261.94-1
chromiumeq75.0.3770.90-1
chromiumeq89.0.4389.114-1
chromiumeq114.0.5735.198-1~deb12u1
chromiumeq100.0.4896.75-1
chromiumeq118.0.5993.117-1~deb11u1
chromiumeq120.0.6099.129-1
chromiumeq116.0.5845.96-1

Name	Operator	Version
chromium	eq	120.0.6099.71-1~deb12u1
chromium	eq	81.0.4044.62-1
chromium	eq	122.0.6261.94-1
chromium	eq	75.0.3770.90-1
chromium	eq	89.0.4389.114-1
chromium	eq	114.0.5735.198-1~deb12u1
chromium	eq	100.0.4896.75-1
chromium	eq	118.0.5993.117-1~deb11u1
chromium	eq	120.0.6099.129-1
chromium	eq	116.0.5845.96-1