CVE-2024-3158

CVSS 3.1: 8.8 high
EPSS: <1%p54
Published: Apr 6, 2024 · Apr 6, 2024
Modified: Jun 17, 2026

Analyze CVE-2024-3158 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Use after free in Bookmarks in Google Chrome prior to 123.0.6312.105 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Vendors: google

Products: chrome

Weakness: CWE-416

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news

1 story

Google fixed another Chrome zero

Security AffairsApr 3, 21:15 UTC · Apr 3, 2024Exploit / PoCExploitedCVE-2024-3159 CVE-2024-3156 CVE-2024-3158+36 · 2 reads