CVE-2024-5157

Use after free in Scheduling in Google Chrome prior to 125.0.6422.76 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVSS

No CVSS.

Configurations

No configuration.

History

21 Nov 2024, 09:47

Type Values Removed Values Added
References () https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_21.html - () https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_21.html -
References () https://issues.chromium.org/issues/336012573 - () https://issues.chromium.org/issues/336012573 -
References () https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5KEVD4433KTOCYY6V4I7MMYKQ6URUS4L/ - () https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5KEVD4433KTOCYY6V4I7MMYKQ6URUS4L/ -
References () https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FX6IYZ6XF7B2WE66NFPNI2NHWJFI6VDF/ - () https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FX6IYZ6XF7B2WE66NFPNI2NHWJFI6VDF/ -

03 Jul 2024, 02:08

Type Values Removed Values Added
CWE CWE-416

10 Jun 2024, 18:15

Type Values Removed Values Added
Summary
  • (es) Use after free en Programación en Google Chrome anterior a 125.0.6422.76 permitía a un atacante remoto ejecutar código arbitrario dentro de una zona de pruebas a través de una página HTML manipulada. (Severidad de seguridad de Chrome: alta)
References
  • () https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5KEVD4433KTOCYY6V4I7MMYKQ6URUS4L/ -
  • () https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FX6IYZ6XF7B2WE66NFPNI2NHWJFI6VDF/ -

22 May 2024, 16:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-05-22 16:15

Updated : 2024-11-21 09:47


NVD link : CVE-2024-5157

Mitre link : CVE-2024-5157

CVE.ORG link : CVE-2024-5157


JSON object : View

Products Affected

No product.

CWE
CWE-416

Use After Free