60
CVE-2024-2886
- CVSS 3.1
- 7.5 high
- EPSS
- 2%p78
- Published
- ·
- Modified
Description · NVD
Use after free in WebCodecs in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High)
- Vendors
- googlefedoraproject
- Products
- chrome, fedora
- Weakness
- CWE-416
- Vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
In the news
14 storiesGoogle addressed the tenth actively exploited Chrome zero
60
Google addressed the ninth actively exploited Chrome zero
60
Google Fixes High-Severity Chrome Flaw Actively Exploited in the Wild
60
Update Chrome Browser Now: 4th Zero
60
Google fixes eighth actively exploited Chrome zero
60
60
60
Google fixes fifth actively exploited Chrome zero
60
60
New Chrome Zero-Day Vulnerability CVE-2024
60
60
Google fixed another Chrome zero
60
Google addressed 2 Chrome zero
60