Lucene search

K
ubuntucveUbuntu.comUB:CVE-2024-4368
HistoryMay 01, 2024 - 12:00 a.m.

CVE-2024-4368

2024-05-0100:00:00
ubuntu.com
ubuntu.com
11
cve-2024-4368; use after free; google chrome; heap corruption; crafted html; remote attack; chromium; severity high; debian; ubuntu; snap

7.5 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.4%

Use after free in Dawn in Google Chrome prior to 124.0.6367.118 allowed a
remote attacker to potentially exploit heap corruption via a crafted HTML
page. (Chromium security severity: High)

Notes

Author Note
alexmurray The Debian chromium source package is called chromium-browser in Ubuntu
mdeslaur starting with Ubuntu 19.10, the chromium-browser package is just a script that installs the Chromium snap