CVE-2024-4671
Google Chromium Visuals Use-After-Free Vulnerability
CVSS
—
Sem CVSS
EPSS
8.3%
p95
KEV
SIM
13 de mai. de 2024
Exploit Today
78
0-100
Publicado: — · Última mod.: —
Produto
Google / Chromium
Vulnerabilidade
Google Chromium Visuals Use-After-Free Vulnerability
Adicionado ao KEV
13 de mai. de 2024
Corrigir até
3 de jun. de 2024
Uso conhecido em ransomware
Não
Descrição resumida
Google Chromium Visuals contains a use-after-free vulnerability that allows a remote attacker to exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
Ação necessária
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Notas
https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_9.html?m=1; https://nvd.nist.gov/vuln/detail/CVE-2024-4671