CVE-2024-2886
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Mar 26, 2024
Updated: Dec 19, 2024
CWE ID 416
Summary
CVE-2024-2886 is a high severity vulnerability in Google Chrome's WebCodecs component, affecting versions prior to 123.0.6312.86. An attacker can exploit a use-after-free condition in this component to execute arbitrary read/write operations via a specially crafted HTML page. This issue could potentially be exploited to launch remote attacks on unsuspecting users. The flaw poses a significant threat to Chrome users and demands immediate attention from administrators for patch deployment.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.