CVE-2024-4331

{"id": "CVE-2024-4331", "metrics": {}, "published": "2024-05-01T13:15:52.343", "references": [{"url": "https://chromereleases.googleblog.com/2024/04/stable-channel-update-for-desktop_30.html", "source": "chrome-cve-admin@google.com"}, {"url": "https://issues.chromium.org/issues/335003891", "source": "chrome-cve-admin@google.com"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L7I4FMQSOVTCIIH4XT2MJGEQRUACLPB6/", "source": "chrome-cve-admin@google.com"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UOC3HLIZCGMIJLJ6LME5UWUUIFLXEGRN/", "source": "chrome-cve-admin@google.com"}], "vulnStatus": "Awaiting Analysis", "descriptions": [{"lang": "en", "value": "Use after free in Picture In Picture in Google Chrome prior to 124.0.6367.118 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)"}, {"lang": "es", "value": "El use after free en Picture In Picture en Google Chrome anterior a 124.0.6367.118 permit\u00eda a un atacante remoto explotar potencialmente la corrupci\u00f3n del mont\u00f3n a trav\u00e9s de una p\u00e1gina HTML manipulada. (Severidad de seguridad de Chrome: alta)"}], "lastModified": "2024-05-04T02:15:06.800", "sourceIdentifier": "chrome-cve-admin@google.com"}