CVE-2024-2176

Description

Use after free in FedCM in Google Chrome prior to 122.0.6261.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

References

https://lists.fedoraproject.org/archives/list/[email protected]/message/OYEGSHTMXIPXD5OW5CXVWQS3ZUBCBSXG/

https://issues.chromium.org/issues/325936438

https://chromereleases.googleblog.com/2024/03/stable-channel-update-for-desktop.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3