VDB
CVE-2024-4949
CVE-2024-4949
PUBLISHED
In Google Chrome bestehen mehrere Schwachstellen. Diese Fehler bestehen in V8 und der Downloads-Komponente aufgrund eines Use-after-free-, Typverwechslungs- und eines unsachgemäßen Implementierungsproblems, was möglicherweise zu entfernter Codeausführung führen kann. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um nicht spezifizierte Auswirkungen zu verursachen. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion.
EPSS 0.25% · 48.7th percentile
Risk Scores
EPSS Score
0.25%
48.7th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Fedora | Fedora Linux | |
| IGEL | IGEL OS | |
| Google Chrome <125.0.6422.61 | ||
| Debian | Debian Linux | |
| Google Chrome <125.0.6422.60 |
Timeline
- May 15, 2024 CVE Published
- May 16, 2024 EPSS Score
- Jun 10, 2024 EPSS Score
- Jul 4, 2024 EPSS Score
- Jul 27, 2024 EPSS Score
- Aug 20, 2024 EPSS Score
- Oct 5, 2024 Coalition ESS Score
- Oct 7, 2024 EPSS Score
- Oct 31, 2024 EPSS Score
- Nov 24, 2024 EPSS Score
- Dec 18, 2024 EPSS Score
- Jan 11, 2025 EPSS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1158.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1158 advisory
- https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_15.html advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-2024-c01c1f5f82 advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-2024-382a7dba53 advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-2024-3a548f46a8 advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-38d250bafc advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-1fb3cec2e0 advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-07403ba3a8 advisory
- https://lists.debian.org/debian-security-announce/2024/msg00104.html advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-3184c14a07 advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-1a95b76e46 advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-46d6266ef3 advisory
- https://kb.igel.com/securitysafety/en/isn-2024-14-chromium-vulnerabilities-129827213.html advisory
- https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1176.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1176 advisory
- https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security#may-16-2024 advisory