CVE-2024-7022

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

Uninitialized Use in V8 in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium)

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Weakness enumeration

CWE-457CWE-908

Affected software

No affected versions have been published.

Timeline

Published
Sep 23, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-70238.8Insufficient data validation in Updater in Google Chrome prior to 128.0.6537.0 allowed a remote attacker to perform privilege escalation viaCVE-2024-70249.6Inappropriate implementation in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially perform a sandbox escapeCVE-2024-70258.8Integer overflow in Layout in Google Chrome prior to 129.0.6668.89 allowed a remote attacker to potentially exploit heap corruption via a crCVE-2024-70267.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Teknogis Informatics Closed Circuit VeCVE-2024-70277.3The WooCommerce - PDF Vouchers plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 4.9.3. This is CVE-2024-70299.8Commands can be injected over the network and executed without authentication.CVE-2024-70304.3The Smart Online Order for Clover plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check CVE-2024-70318.8The File Manager Pro – Filester plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check onCVE-2024-70326.5The Smart Online Order for Clover plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'CVE-2024-70356.9In version v0.3.8 of open-webui/open-webui, sensitive actions such as deleting and resetting are performed using the GET method. This vulnerCVE-2024-70416.5An Insecure Direct Object Reference (IDOR) vulnerability exists in open-webui/open-webui version v0.3.8. The vulnerability occurs in the APICVE-2024-70429.8A vulnerability in the GraphCypherQAChain class of langchain-ai/langchainjs versions 0.2.5 and all versions with this class allows for promp
CVE-2024-7022: Medium severity, CVSS 4.3 | Vulnix