VDB

CISA-2024-4671

CISA-2024-4671 PUBLISHED CVSS 9.6 CRITICAL

Reported by Chrome · Published May 9, 2024

Use after free in Visuals in Google Chrome prior to 124.0.6367.201 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

Risk Scores

CVSS 3.1
9.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Affected Products

VendorProductVersions
GoogleChrome124.0.6367.201
googlechrome0, 0
GoogleChrome124.0.6367.201, 124.0.6367.201
fedoraprojectfedora39, 38, 39

Timeline

  • May 9, 2024 CVE Published
  • Jul 28, 2025 CVE Updated

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›