by Kastro
Paper/Archive/CVE-2024-4058

CVE-2024-4058

Google Chrome — Type confusion in ANGLE in Google Chrome prior to 124.0.6367.78 allowed a remote attacker to potentially exploit heap corruption via a cr…

EPSS 9%CVSS 9.0
critical.is priorityof 100
46
CVSS 9.0 (ADP)9.0 / 10 × 3027.0Not in CISA KEV+300.0EPSS percentile 95.2.952 × 2019.0No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Type confusion in ANGLE in Google Chrome prior to 124.0.6367.78 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)

Affected

ProductAffectedFixed inSource
Chrome124.0.6367.78 – < 124.0.6367.78124.0.6367.78CNA
chrome< 124.0.6367.78124.0.6367.78CISA-ADP

Scores by source

CISA ADP9.0CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refchromereleases.googleblog.com/2024/04/stable-channel-update-for-desktop_24.htmlrefissues.chromium.org/issues/332546345reflists.fedoraproject.org/archives/list/[email protected]/message/UOC3HLIZCGMIJLJ6LME5UWUUIFLXEGRNreflists.fedoraproject.org/archives/list/[email protected]/message/IDLUD644WEWGOFKMZWC2K7Z4CQOKQYR7reflists.fedoraproject.org/archives/list/[email protected]/message/M4PCXKCOVBUUU6GOSN46DCPI4HMER3PJ