CVE-2024-1939

Description

Type Confusion in V8 in Google Chrome prior to 122.0.6261.94 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

References

https://github.com/AndrewAltimit/exploits

https://github.com/rycbar77/CVE-2024-1939

https://lists.fedoraproject.org/archives/list/[email protected]/message/YTGM2WHYSZAUUPENB7YO6E5ONAKE6AKJ/

https://lists.fedoraproject.org/archives/list/[email protected]/message/L6KJCEJWJR5Z54Z75LRJGELDNMFDKLZG/

https://lists.fedoraproject.org/archives/list/[email protected]/message/FGWSP5MIK7CDWJQHN2SJJX2YGSSS7E4O/

https://issues.chromium.org/issues/323694592

https://chromereleases.googleblog.com/2024/02/stable-channel-update-for-desktop_27.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS