CVE-2024-7966 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Google Chrome
Severity
8.8HIGHNVD
EPSS
0.9%
top 25.03%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedAug 21
Latest updateSep 11
Description
Out of bounds memory access in Skia in Google Chrome prior to 128.0.6613.84 allowed a remote attacker who had compromised the renderer process to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9
Affected Packages4 packages
🔴Vulnerability Details
3📋Vendor Advisories
5Debian▶
CVE-2024-7966: chromium - Out of bounds memory access in Skia in Google Chrome prior to 128.0.6613.84 allo...↗2024