Type Confusion Affecting chromium package, versions [,125.0.6422.60)
Threat Intelligence
Exploit Maturity
Mature
EPSS
0.23% (62nd
percentile)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-UNMANAGED-CHROMIUM-6860017
- published 16 May 2024
- disclosed 15 May 2024
- credit Boris Larin, Vasily Berdnikov
Introduced: 15 May 2024
CVE-2024-4947 Open this link in a new tabHow to fix?
Upgrade chromium to version 125.0.6422.60 or higher.
Overview
Affected versions of this package are vulnerable to Type Confusion via a crafted HTML page. An attacker can execute arbitrary code inside a sandbox.
CVSS Scores
version 3.1