Use after free in FedCM in Google Chrome prior to 122.0.6261.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade chromium | Mar 8, 2024 | Mar 6, 2024 |
| Freebsd | — | Upgrade chromiumUpgrade ungoogled-chromium | Dec 10, 2025 | Mar 6, 2024 |
| Gentoo Linux | — | Upgrade www-client/chromium.Upgrade www-client/google-chrome.Upgrade www-client/opera.Upgrade www-client/microsoft-edge. | Dec 9, 2024 | Mar 6, 2024 |
| Google Chrome | — | Upgrade to the latest version of Google Chrome | Mar 7, 2024 | Mar 5, 2024 |
| Microsoft Edge | — | Update Microsoft Edge to the latest version | Mar 8, 2024 | Mar 7, 2024 |
| Suse | — | Upgrade clang17-develUpgrade llvm17-vim-pluginsUpgrade llvm17-pollyUpgrade llvm17Upgrade libLLVM17-32bitUpgrade llvm17-libc++abi1Upgrade chromedriverUpgrade chromiumUpgrade libLLVM17-64bitUpgrade llvm17-docUpgrade llvm17-goldUpgrade libclang-cpp17Upgrade lld17Upgrade llvm17-libclang13Upgrade libclang-cpp17-32bitUpgrade llvm17-develUpgrade lldb17Upgrade llvm17-opt-viewerUpgrade clang17Upgrade libLLVM17Upgrade libLTO17Upgrade llvm17-libc++-develUpgrade libomp17-develUpgrade liblldb17Upgrade llvm17-libc++1Upgrade clang17-docUpgrade llvm17-polly-develUpgrade libclang-cpp17-64bitUpgrade lldb17-develUpgrade llvm17-libc++abi-develUpgrade python3-lldb17Upgrade python3-clang17 | Mar 19, 2024 | Mar 6, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub