VDB
CVE-2024-3833
CVE-2024-3833
PUBLISHED
In Google Chrome bestehen mehrere Schwachstellen. Diese Fehler bestehen in mehreren Komponenten wie V8, WebAssembly und Downloads, unter anderem aufgrund mehrerer sicherheitsrelevanter Probleme wie Objektbeschädigung, Use-after-free, unzureichender Datenvalidierung und unangemessener Implementierung, um nur einige zu nennen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um nicht spezifizierte Auswirkungen zu verursachen. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion.
EPSS 3.05% · 87.0th percentile
Risk Scores
EPSS Score
3.05%
87.0th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Gentoo | Gentoo Linux | |
| Google Chrome <124.0.6367.61 | ||
| Fedora | Fedora Linux | |
| Debian | Debian Linux | |
| SUSE | SUSE openSUSE | |
| Google Chrome <124.0.6367.60 |
Exploit Intelligence
- CIRCL published-proof-of-concept: CVE-2024-3833 (circl-sighting)
- CIRCL seen: CVE-2024-3833 (circl-sighting)
- https://chromereleases.googleblog.com/2024/04/stable-channel-update-for-desktop_16.html (circl)
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CWIVXXSVO5VB3NAZVFJ7CWVBN6W2735T/ (circl)
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PCWPUBGTBNT4EW32YNZMRIPB3Y4R6XL6/ (circl)
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WEP5NJUWMDRLDQUKU4LFDUHF5PCYAPIO/ (circl)
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M4PCXKCOVBUUU6GOSN46DCPI4HMER3PJ/ (circl)
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IDLUD644WEWGOFKMZWC2K7Z4CQOKQYR7/ (circl)
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UOC3HLIZCGMIJLJ6LME5UWUUIFLXEGRN/ (circl)
- https://issues.chromium.org/issues/331383939 (nist-nvd)
Timeline
- Apr 16, 2024 CVE Published
- Apr 17, 2024 EPSS Score
- Jun 6, 2024 EPSS Score
- Jul 1, 2024 EPSS Score
- Jul 5, 2024 PoC Published
- Aug 19, 2024 EPSS Score
- Oct 8, 2024 EPSS Score
- Oct 27, 2024 PoC Published
- Nov 2, 2024 EPSS Score
- Dec 8, 2024 CVE Updated
- Dec 23, 2024 EPSS Score
- Feb 11, 2025 EPSS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0912.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-0912 advisory
- http://chromereleases.googleblog.com/2024/04/stable-channel-update-for-desktop_16.html advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-2024-12edb9dec8 advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-2024-5d8f4f86b0 advisory
- https://lists.debian.org/debian-security-announce/2024/msg00077.html advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-2bf39e0ba4 advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-2024-8b50ca2e22 advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-2024-de34d9d61f advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-2024-decb7e94a1 advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-0c24da3136 advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-2024-2c9be9d949 advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-2024-0539d2c8b0 advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-68b6d0dafe advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-2024-5cf9499b62 advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-808f3961ef advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-f74fbce604 advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-6f1c3198f5 advisory
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/2S7S4HVABEMIRHPQD4H3O6EA36PLCUCI/ advisory
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2S7S4HVABEMIRHPQD4H3O6EA36PLCUCI/ advisory
…and 14 more