VDB
CVE-2024-4558
CVE-2024-4558
PUBLISHED
CVSS 9.300000190734863 CRITICAL
In Google Chrome bestehen mehrere Schwachstellen. Diese Fehler bestehen in den ANGLE- und WebAudio-Komponenten aufgrund eines Use-after-free- und eines Heap-Pufferüberlauf-Problems. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um nicht spezifizierte Auswirkungen zu verursachen. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion.
EPSS 3.68% · 88.2th percentile
Risk Scores
CVSS 4.0
9.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS Score
3.68%
88.2th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apple | Apple macOS Ventura <13.6.8 | |
| Red Hat | Red Hat Enterprise Linux 9 | |
| Apple | Apple iPadOS <17.6 | |
| Google Chrome <124.0.6367.155 | ||
| RESF | RESF Rocky Linux 8 | |
| Apple | Apple Safari <17.6 | |
| Apple | Apple iOS <17.6 | |
| Debian | Debian Linux | |
| Apple | Apple macOS Sonoma <14.6 | |
| Gentoo | Gentoo Linux | |
| Apple | Apple macOS Monterey <12.7.6 | |
| Oracle | Oracle Linux | |
| Apple | Apple iPadOS <16.7.9 | |
| Apple | Apple iOS <16.7.9 | |
| SUSE | SUSE openSUSE | |
| Dell | Dell PowerProtect Data Domain | |
| Fedora | Fedora Linux | |
| Google Chrome <124.0.6367.156 | ||
| Red Hat | Red Hat Enterprise Linux | |
| Red Hat | Red Hat Enterprise Linux 9.2 |
Exploit Intelligence
- https://issues.chromium.org/issues/337766133 (nist-nvd)
- macos_v2_generated.go (github-poc)
- macos_v2_generated.go (github-poc)
- macos_v2_generated.go (github-poc)
- macos_v2_generated.go (github-poc)
- macos_v2_generated.go (github-poc)
- macos_v2_generated.go (github-poc)
- macos_v2_generated.go (github-poc)
- macos_v1_generated.go (github-poc)
- macos_v1_generated.go (github-poc)
…and 26 more exploits
Timeline
- May 7, 2024 CVE Published
- May 8, 2024 EPSS Score
- Jun 1, 2024 EPSS Score
- Jul 20, 2024 EPSS Score
- Aug 14, 2024 EPSS Score
- Sep 7, 2024 EPSS Score
- Oct 5, 2024 Coalition ESS Score
- Oct 17, 2024 Coalition ESS Score
- Oct 25, 2024 EPSS Score
- Nov 18, 2024 EPSS Score
- Dec 13, 2024 EPSS Score
- Dec 20, 2024 Coalition ESS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1070.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1070 advisory
- https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_7.html advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-2024-f93392509c advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-2024-92780a83f9 advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-ac000e6379 advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-2024-55e7e839f1 advisory
- https://lists.debian.org/debian-security-announce/2024/msg00092.html advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-f74fbce604 advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-e94a7220f2 advisory
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/2S7S4HVABEMIRHPQD4H3O6EA36PLCUCI/ advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-2024-1bc17d6ec7 advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-2024-5f84678c08 advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-2024-df7e365b4a advisory
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2S7S4HVABEMIRHPQD4H3O6EA36PLCUCI/ advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-2024-3a548f46a8 advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-38d250bafc advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-1fb3cec2e0 advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-1a95b76e46 advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-3184c14a07 advisory
…and 25 more