ИнструментыУязвимости БДУБлоклистыРасширениеУтилитыБлогAPIМониторинг
Главная → Уязвимости → CVE-2024-2887
7.7высокая

CVE-2024-2887

→ есть в БДУ: BDU:2024-02532 (на русском)
Описание (на английском; русское — в БДУ выше)

Type Confusion in WebAssembly in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)

Затрагиваемое ПО
Google ChromeFedoraproject Fedora
CVSS
Балл7.7 — высокая
ВекторCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
Источники
https://chromereleases.googleblog.com/2024/03/stable-channel-update-for-desktop_26.htmlhttps://issues.chromium.org/issues/330588502https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3YUWGSMA5X2NQP5XEFCLRWNX6246GZ2C/https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/G3RKI7VTQSIAI3PVZGRCHOSELTQXQ5FQ/https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IQMRHKDEG4J7TMRRRGUGW6GS4MVBX5IT/https://chromereleases.googleblog.com/2024/03/stable-channel-update-for-desktop_26.htmlhttps://issues.chromium.org/issues/330588502https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3YUWGSMA5X2NQP5XEFCLRWNX6246GZ2C/