CVE-2024-4059

2024-05-0113:15:52

Google

osv.dev

v8 api

google chrome

cross-site data

5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.5%

JSON

Out of bounds read in V8 API in Google Chrome prior to 124.0.6367.78 allowed a remote attacker to leak cross-site data via a crafted HTML page. (Chromium security severity: High)

CPENameOperatorVersion
chromiumeq114.0.5735.133-1
chromiumeq119.0.6045.159-1~deb12u1
chromiumeq124.0.6367.118-1
chromiumeq106.0.5249.91-1~deb11u1
chromiumeq112.0.5615.49-1
chromiumeq100.0.4896.60-1~deb11u1
chromiumeq106.0.5249.91-1
chromiumeq116.0.5845.180-1~deb12u1
chromiumeq90.0.4430.212-1
chromiumeq120.0.6099.224-1~deb12u1

Name	Operator	Version
chromium	eq	114.0.5735.133-1
chromium	eq	119.0.6045.159-1~deb12u1
chromium	eq	124.0.6367.118-1
chromium	eq	106.0.5249.91-1~deb11u1
chromium	eq	112.0.5615.49-1
chromium	eq	100.0.4896.60-1~deb11u1
chromium	eq	106.0.5249.91-1
chromium	eq	116.0.5845.180-1~deb12u1
chromium	eq	90.0.4430.212-1
chromium	eq	120.0.6099.224-1~deb12u1