Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2024-4671

Use after free in Visuals in Google Chrome prior to 124.0.6367.201 allowed a remote attacker who had compromised the renderer process to pot

Published
Last modified
published
Listed in CISA KEV
Fix
Fixed in 124.0.6367.201
None on Exploit-DB, Metasploit or GitHub

Summary

Google Chrome, a web browser, is affected by this vulnerability. An attacker who had already compromised the browser's renderer process could potentially escape the sandbox, gaining greater control over the user's system, by using a specially crafted web page.

Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.

Read the original description

Use after free in Visuals in Google Chrome prior to 124.0.6367.201 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

Timeline

  1. CVE published
  2. Added to CISA KEV

    CISA has evidence of exploitation in the wild

  3. CISA remediation deadline

    Due date for US federal agencies to patch

  4. Record last updated

Affected versions

  • Google Chrome

    From 124.0.6367.201 · fixed in 124.0.6367.201

References 7

chromereleases.googleblog.com

issues.chromium.org

lists.fedoraproject.org