Lucene search

K
ubuntucveUbuntu.comUB:CVE-2024-2886
HistoryMar 26, 2024 - 12:00 a.m.

CVE-2024-2886

2024-03-2600:00:00
ubuntu.com
ubuntu.com
8
google chrome
webcodecs
remote attack
arbitrary read/write
crafted html
ubuntu
debian package
chromium snap

7.1 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

Use after free in WebCodecs in Google Chrome prior to 123.0.6312.86 allowed
a remote attacker to perform arbitrary read/write via a crafted HTML page.
(Chromium security severity: High)

Notes

Author Note
alexmurray The Debian chromium source package is called chromium-browser in Ubuntu
mdeslaur starting with Ubuntu 19.10, the chromium-browser package is just a script that installs the Chromium snap