by Kastro
Paper/Archive/CVE-2024-0808

CVE-2024-0808

Google Chrome — Integer underflow in WebUI in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via a…

EPSS 0.5%CVSS 9.8
critical.is priorityof 100
39
CVSS 9.8 (ADP, NVD agree)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 45.9.459 × 209.2No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Integer underflow in WebUI in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via a malicious file. (Chromium security severity: High)

Affected

ProductAffectedFixed inSource
Chrome121.0.6167.85 – < 121.0.6167.85121.0.6167.85CNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refchromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop_23.htmlrefcrbug.com/1504936reflists.fedoraproject.org/archives/list/[email protected]/message/VXDSGAFQD4BDB4IB2O4ZUSHC3JCVQEKCreflists.fedoraproject.org/archives/list/[email protected]/message/MMI6GXFONZV6HE3BPZO3AP6GUVQLG4JQ