CVE-2024-4558

CriticalCVSS 9.6/10Last modified Jun 17, 2026

Description

Use after free in ANGLE in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Metrics

CVSS 3.1 9.6/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

VendorProductVersions
GoogleChrome>= 124.0.6367.155, < 124.0.6367.155
googlechrome< 124.0.6367.155

References

Timeline

Published
May 7, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-455807.8Memory corruption while handling multuple IOCTL calls from userspace for remote invocation.CVE-2024-455817.8Memory corruption while sound model registration for voice activation with audio kernel driver.CVE-2024-455827.8Memory corruption while validating number of devices in Camera kernel .CVE-2024-455837.8Memory corruption while handling multiple IOCTL calls from userspace to operate DMA operations.CVE-2024-455847.8Memory corruption can occur when a compat IOCTL call is followed by a normal IOCTL call from userspace.CVE-2024-455868.8This vulnerability exists due to improper access controls on APIs in the Authentication module of Symphony XTS Web Trading and Mobile TradinCVE-2024-455878.8This vulnerability exists in Symphony XTS Web Trading platform version 2.0.0.1_P160 due to improper access controls on APIs in the TransactiCVE-2024-455888.1This vulnerability exists in Symphony XTS Web Trading platform version 2.0.0.1_P160 due to improper access controls on APIs in the PreferencCVE-2024-455895.9RapidIdentity LTS through 2023.0.2 and Cloud through 2024.08.0 improperly restricts excessive authentication attempts and allows a remote atCVE-2024-45596.5Heap buffer overflow in WebAudio in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap corruption vCVE-2024-455907.5body-parser is Node.js body parsing middleware. body-parser <1.20.3 is vulnerable to denial of service when url encoding is enabled. A malicCVE-2024-455915.3XWiki Platform is a generic wiki platform. The REST API exposes the history of any page in XWiki of which the attacker knows the name. The e
CVE-2024-4558: Critical severity, CVSS 9.6 | Vulnix