Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-3157

Опубликовано: 10 апр. 2024
Источник: nvd
CVSS3: 9.6
CVSS3: 8.1
EPSS Низкий

Описание

Out of bounds memory access in Compositing in Google Chrome prior to 123.0.6312.122 allowed a remote attacker who had compromised the GPU process to potentially perform a sandbox escape via specific UI gestures. (Chromium security severity: High)

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
Версия до 123.0.6312.122 (исключая)
Конфигурация 2

Одно из

cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:40:*:*:*:*:*:*:*

EPSS

Процентиль: 58%
0.00366
Низкий

9.6 Critical

CVSS3

8.1 High

CVSS3

Дефекты

CWE-787
CWE-787

Связанные уязвимости

CVSS3: 9.6
ubuntu
около 1 года назад

Out of bounds memory access in Compositing in Google Chrome prior to 123.0.6312.122 allowed a remote attacker who had compromised the GPU process to potentially perform a sandbox escape via specific UI gestures. (Chromium security severity: High)

msrc
около 1 года назад

Chromium: CVE-2024-3157 Out of bounds write in Compositing

CVSS3: 9.6
debian
около 1 года назад

Out of bounds memory access in Compositing in Google Chrome prior to 1 ...

CVSS3: 8.1
github
около 1 года назад

Out of bounds memory access in Compositing in Google Chrome prior to 123.0.6312.122 allowed a remote attacker who had compromised the GPU process to potentially perform a sandbox escape via specific UI gestures. (Chromium security severity: High)

CVSS3: 8.8
fstec
около 1 года назад

Уязвимость компонента Compositing браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 58%
0.00366
Низкий

9.6 Critical

CVSS3

8.1 High

CVSS3

Дефекты

CWE-787
CWE-787