Use after free in Downloads in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
References
Configurations
History
03 May 2024, 04:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
28 Apr 2024, 04:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
23 Apr 2024, 18:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
23 Apr 2024, 02:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
21 Apr 2024, 04:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
19 Apr 2024, 17:20
Type | Values Removed | Values Added |
---|---|---|
First Time |
Google
Google chrome |
|
References | () https://chromereleases.googleblog.com/2024/04/stable-channel-update-for-desktop_16.html - Vendor Advisory | |
References | () https://issues.chromium.org/issues/326607008 - Permissions Required | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
CWE | CWE-416 | |
CPE | cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* |
17 Apr 2024, 12:48
Type | Values Removed | Values Added |
---|---|---|
Summary |
|
17 Apr 2024, 08:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-04-17 08:15
Updated : 2024-05-03 04:15
NVD link : CVE-2024-3834
Mitre link : CVE-2024-3834
CVE.ORG link : CVE-2024-3834
JSON object : View
Products Affected
- chrome
CWE
CWE-416
Use After Free