CVE-2024-6772

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Inappropriate implementation in V8 in Google Chrome prior to 126.0.6478.182 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787 CWE-358

Affected software

No affected versions have been published.

Timeline

Published: Jul 16, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-67738.8Inappropriate implementation in V8 in Google Chrome prior to 126.0.6478.182 allowed a remote attacker to potentially exploit heap corruption CVE-2024-67748.8Use after free in Screen Capture in Google Chrome prior to 126.0.6478.182 allowed a remote attacker who convinced a user to engage in specif CVE-2024-67758.8Use after free in Media Stream in Google Chrome prior to 126.0.6478.182 allowed a remote attacker who convinced a user to engage in specific CVE-2024-67768.8Use after free in Audio in Google Chrome prior to 126.0.6478.182 allowed a remote attacker to potentially exploit heap corruption via a craf CVE-2024-67776.5Use after free in Navigation in Google Chrome prior to 126.0.6478.182 allowed an attacker who convinced a user to install a malicious extens CVE-2024-67787.5Race in DevTools in Google Chrome prior to 126.0.6478.182 allowed an attacker who convinced a user to install a malicious extension to injec CVE-2024-67799.6Out of bounds memory access in V8 in Google Chrome prior to 126.0.6478.182 allowed a remote attacker to potentially perform a sandbox escape CVE-2024-67803.3Improper permission control in the mobile application (com.android.server.telecom) may lead to user information security risks.CVE-2024-67817.5Path traversal in Calibre <= 7.14.0 allow unauthenticated attackers to achieve arbitrary file read.CVE-2024-67829.8Improper access control in Calibre 6.9.0 ~ 7.14.0 allow unauthenticated attackers to achieve remote code execution.CVE-2024-67834.8A vulnerability has been discovered in Vue, that allows an attacker to perform XSS via prototype pollution. The attacker could change the pr CVE-2024-67849.9Server-Side Request Forgery vulnerabilities were found providing a potential for access to unauthorized resources and unintended information