Lucene search

K
ubuntucveUbuntu.comUB:CVE-2024-5499
HistoryMay 30, 2024 - 12:00 a.m.

CVE-2024-5499

2024-05-3000:00:00
ubuntu.com
ubuntu.com
1
google chrome
streams api
out of bounds write
arbitrary code execution
remote attacker
crafted html page
sandbox
chromium
security severity
high

8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

Out of bounds write in Streams API in Google Chrome prior to 125.0.6422.141
allowed a remote attacker to execute arbitrary code inside a sandbox via a
crafted HTML page. (Chromium security severity: High)

Notes

Author Note
alexmurray The Debian chromium source package is called chromium-browser in Ubuntu
mdeslaur starting with Ubuntu 19.10, the chromium-browser package is just a script that installs the Chromium snap