CVE-2024-9955

Description

Use after free in WebAuthentication in Google Chrome prior to 130.0.6723.58 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

References

https://github.com/ShawtyTwo/CVE-2024-9955-POC

https://github.com/amfg145/CVE-2024-9955-POC

https://issues.chromium.org/issues/370133761

https://chromereleases.googleblog.com/2024/10/stable-channel-update-for-desktop_15.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS