CVE-2024-2887

概要

参考情報

• chromereleases.googleblog.com/2024/03/stable-channel-update-for-desktop_26.html · Release Notes
• issues.chromium.org/issues/330588502 · Exploit
• lists.fedoraproject.org/archives/list/[email protected]/message/3YUWGSMA5X2NQP5XEFCLRWNX6246GZ2C · Mailing List
• lists.fedoraproject.org/archives/list/[email protected]/message/G3RKI7VTQSIAI3PVZGRCHOSELTQXQ5FQ · Mailing List
• lists.fedoraproject.org/archives/list/[email protected]/message/IQMRHKDEG4J7TMRRRGUGW6GS4MVBX5IT · Mailing List
• zerodayinitiative.com/blog/2024/5/2/cve-2024-2887-a-pwn2own-winning-bug-in-google-chrome · Exploit

chrome のその他の脆弱性

• CVE-2026-118359高 8.8Memory corruption in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the s…
• CVE-2026-118358高 8.8Memory corruption in WebAudio in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside…
• CVE-2026-118357高 8.8Use after free in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside …
• CVE-2026-118356高 8.8Use after free in WTF in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a c…
• CVE-2026-118354高 8.8Improper input validation in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code in…