Skip to content
OpenAdvisories
High · 8.8 CVE-2021-38023 EUVD-2021-24496GHSA-3w2h-6gvg-jj2v

Use after free in Extensions in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a…

Published Sep 23, 2024 · Updated Sep 24, 2024 · Assigned by Chrome

Description

Use after free in Extensions in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Affected products

VendorProductAffectedFixed
Google Chrome 92.0.4515.107 – < 92.0.4515.107 92.0.4515.107

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 chromium 93.0.4577.82-1 —
Debian 13 chromium 93.0.4577.82-1 —
Debian 12 chromium 93.0.4577.82-1 —

References