CVE-2024-5832

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Use after free in Dawn in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

No affected versions have been published.

Timeline

Published: Jun 11, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2024

CVE-2024-583205.3An information disclosure vulnerability in Kentico Xperience allows public users to access sensitive administration interface hostname detai CVE-2024-583215.4A stored cross-site scripting vulnerability in Kentico Xperience allows attackers to inject malicious scripts via form validation rule confi CVE-2024-583225.4A stored cross-site scripting vulnerability in Kentico Xperience allows attackers to inject malicious code into shipping options configurati CVE-2024-583235.4A stored cross-site scripting vulnerability in Kentico Xperience allows attackers to inject malicious scripts via the Checkbox form componen CVE-2024-58338.8Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially perform out of bounds memory access vi CVE-2024-583307.5A missing authentication check in Bosch IP cameras of families CPP13 and CPP14 allows an unauthenticated attacker to retrieve video analytic CVE-2024-583355.0OpenXRechnungToolbox through 2024-10-05-3.0.0 before 6c50e89 allows XXE because the disallow-doctype-decl feature is not enabled in visualiz CVE-2024-583365.3Akuvox Smart Intercom S539 contains an unauthenticated vulnerability that allows remote attackers to access live video streams by requesting CVE-2024-583374.3Akuvox Smart Intercom S539 contains an improper access control vulnerability that allows users with 'User' privileges to modify API access s CVE-2024-5833810.0Anevia Flamingo XL 3.2.9 contains a restricted shell vulnerability that allows remote attackers to escape the sandboxed environment through CVE-2024-583397.5LlamaIndex (run-llama/llama_index) versions up to and including 0.12.2 contain an uncontrolled resource consumption vulnerability in the Van CVE-2024-58348.8Inappropriate implementation in Dawn in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to execute arbitrary code via a craft