CVE-2024-4558

CRÍTICO 9.6CVE-2024-4558 · Published 07/05/2024 · updated 17/06/2026

Em resumo

CVE-2024-4558 é uma vulnerabilidade CRÍTICO (CVSS 9.6) que afeta safari (apple), chrome (google).
Chance de exploração nos próximos 30 dias (EPSS): 1.5%, maior que 74.8% das vulnerabilidades.
Correção: atualize para 17.6, 124.0.6367.155 ou posterior.

Package	Affected versions	Patched versions
safari apple	`< 17.6`	`17.6`
chrome google	`< 124.0.6367.155`	`124.0.6367.155`

Description

Use after free in ANGLE in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

References

seclists.org/fulldisclosure/2024/Jul/15 · Mailing List
seclists.org/fulldisclosure/2024/Jul/16 · Mailing List
seclists.org/fulldisclosure/2024/Jul/18 · Mailing List
chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_7.html · Release Notes
issues.chromium.org/issues/337766133 · Exploit
lists.fedoraproject.org/archives/list/[email protected]/message/6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN · Mailing List
lists.fedoraproject.org/archives/list/[email protected]/message/BWFSZNNWSQYDRYKNLBDGEXXKMBXDYQ3F · Mailing List
lists.fedoraproject.org/archives/list/[email protected]/message/FAWEKDQTHPN7NFEMLIWP7YMIZ2DHF36N · Mailing List
lists.fedoraproject.org/archives/list/[email protected]/message/IPETICRXUOGRIM4U3BCRTIKE3IZWCSBT

Mais vulnerabilidades de safari

Ver tudo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free