CVE-2024-6778

HIGH Year: 2024
CVSS v3 Score
8.8
High
Weakness Type
CWE-362
View all →

Vulnerability Description

Race in DevTools in Google Chrome prior to 126.0.6478.182 allowed an attacker who convinced a user to install a malicious extension to inject scripts or HTML into a privileged page via a crafted Chrome Extension. (Chromium security severity: High)

Related Vulnerabilities

CVE-2020-12416

HIGH
CVSS:8.8(High)

A VideoStreamEncoder may have been freed in a race condition with VideoBroadcaster::AddOrUpdateSink, resulting in a use-after-free, memory corruption, and a potentially exploitable crash. This vulnera...

CWE-3622020

CVE-2020-12420

HIGH
CVSS:8.8(High)

When trying to connect to a STUN server, a race condition could have caused a use-after-free of a pointer, leading to memory corruption and a potentially exploitable crash. This vulnerability affects ...

CWE-3622020

CVE-2020-15670

HIGH
CVSS:8.8(High)

Mozilla developers reported memory safety bugs present in Firefox for Android 79. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could hav...

CWE-3622020

CVE-2020-6388

HIGH
CVSS:8.8(High)

Out of bounds access in WebAudio in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CWE-3622020

CVE-2021-21165

HIGH
CVSS:8.8(High)

Data race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CWE-3622021

CVE-2021-21166

HIGH
CVSS:8.8(High)

Data race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CWE-3622021