VDB
CISA-2024-2176
CISA-2024-2176
PUBLISHED
CVSS 8.8 HIGH
Reported by Chrome · Published March 6, 2024
Use after free in FedCM in Google Chrome prior to 122.0.6261.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Risk Scores
CVSS 3.1
8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Chrome | 122.0.6261.111 | |
| Chrome | 122.0.6261.111, 122.0.6261.111 | |
| fedoraproject | fedora | 40, 40 |
| chrome | 0, 0 |
Timeline
- Mar 6, 2024 CVE Published
- Aug 8, 2024 CVE Updated