CVE-2024-7000

CVSS V2 None CVSS V3 None

Description

Use after free in CSS in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

Overview

CVE ID
CVE-2024-7000

Assigner
Chrome

Vulnerability Status
PUBLISHED

Published Version
2024-08-06T15:37:26.218Z

Last Modified Date
2024-08-06T15:37:26.218Z

Weakness Enumerations

CWE	URL
CWE-416	http://cwe.mitre.org/data/definitions/416.html

References

Reference URL	Reference Tags
https://chromereleases.googleblog.com/2024/07/stable-channel-update-for-desktop_23.html
https://issues.chromium.org/issues/339877158

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2024-7000
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-7000

History

Created	Old Value	New Value	Data Type	Notes
2024-08-07 13:03:06				Added to TrackCVE