CVE-2024-4558

CRITICAL 9.6EPSS 1.5%

Use after free in ANGLE in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVSS v3.1: 9.6 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
CVSS v3.1: 7.5 HIGHCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS: 1.53% chance of exploitation in the next 30 days, 73th percentile
Published: 2024-05-07
Updated: 2025-11-04

Proof-of-concept exploits (1)

https://issues.chromium.org/issues/337766133

References

Related