CVE-2024-4060

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-4060
Use after free in Dawn in Google Chrome prior to 124.0.6367.78 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVSS

No CVSS.

References
Link Resource
https://chromereleases.googleblog.com/2024/04/stable-channel-update-for-desktop_24.html
https://issues.chromium.org/issues/333420620
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UOC3HLIZCGMIJLJ6LME5UWUUIFLXEGRN/
Configurations

No configuration.

History

03 May 2024, 04:15

Type Values Removed Values Added
References
  • () https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UOC3HLIZCGMIJLJ6LME5UWUUIFLXEGRN/ -
Summary
  • (es) El use after free en Dawn en Google Chrome anterior a 124.0.6367.78 permitía a un atacante remoto explotar potencialmente la corrupción del montón a través de una página HTML manipulada. (Severidad de seguridad de Chrome: alta)

01 May 2024, 13:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-01 13:15

Updated : 2024-05-03 04:15

NVD link : CVE-2024-4060

Mitre link : CVE-2024-4060

CVE.ORG link : CVE-2024-4060

JSON object : View

Products Affected

No product.

CWE

No CWE.