Lucene search

K
vulnrichmentChromeVULNRICHMENT:CVE-2024-8362
HistorySep 03, 2024 - 10:40 p.m.

CVE-2024-8362

2024-09-0322:40:26
Chrome
github.com
3
cve-2024-8362
google chrome
webaudio
heap corruption
html page
remote attacker
chromium
security severity
high

AI Score

6.6

Confidence

High

SSVC

Exploitation

none

Automatable

no

Technical Impact

total

Use after free in WebAudio in Google Chrome prior to 128.0.6613.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"
    ],
    "vendor": "google",
    "product": "chrome",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "128.0.6613.119",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]

AI Score

6.6

Confidence

High

SSVC

Exploitation

none

Automatable

no

Technical Impact

total