{"id":"CVE-2024-6989","aliases":["DEBIAN-CVE-2024-6989","DSA-5735-1","EUVD-2024-47968","GHSA-32j6-235r-7fmm","MGASA-2024-0321","openSUSE-SU-2024:0254-2","openSUSE-SU-2024:14272-1","openSUSE-SU-2024:14276-1","openSUSE-SU-2024:14548-1"],"status":"published","title":"Use after free in Loader in Google Chrome prior to 127.0.6533.72 allowed a remote attacker to...","description":"Use after free in Loader in Google Chrome prior to 127.0.6533.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00644,"percentile":0.51167,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-416"],"published":"2024-07-31T00:00:00Z","modified":"2026-11-02T12:03:11Z","fixes":[{"ecosystem":"Debian:12","package":"chromium","fixed_in":["127.0.6533.88-1~deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"chromium","fixed_in":["127.0.6533.88-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"chromium","fixed_in":["127.0.6533.88-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"chromium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"127.0.6533.88-1~deb12u1"}]}],"versions":["113.0.5672.126-1","114.0.5735.106-1","114.0.5735.106-1~deb11u1","114.0.5735.106-1~deb12u1","114.0.5735.133-1","114.0.5735.133-1~deb11u1","114.0.5735.133-1~deb12u1","114.0.5735.198-1","114.0.5735.198-1~deb11u1","114.0.5735.198-1~deb12u1","114.0.5735.90-1","114.0.5735.90-2","114.0.5735.90-2~deb11u1","114.0.5735.90-2~deb12u1","115.0.5790.102-1","115.0.5790.102-2","115.0.5790.170-1","115.0.5790.170-1~deb11u1","115.0.5790.170-1~deb12u1","115.0.5790.98-1","115.0.5790.98-1~deb11u1","115.0.5790.98-1~deb12u1","115.0.5790.98-2","116.0.5845.110-1","116.0.5845.110-1~deb11u1","116.0.5845.110-1~deb12u1","116.0.5845.110-2","116.0.5845.140-1","116.0.5845.140-1~deb11u1","116.0.5845.140-1~deb12u1","116.0.5845.180-1","116.0.5845.180-1~deb11u1","116.0.5845.180-1~deb12u1","116.0.5845.96-1","116.0.5845.96-1~deb11u1","116.0.5845.96-1~deb12u1","116.0.5845.96-2","117.0.5938.132-1","117.0.5938.132-1~deb11u1","117.0.5938.132-1~deb12u1","117.0.5938.132-2","117.0.5938.149-1","117.0.5938.149-1~deb11u1","117.0.5938.149-1~deb12u1","117.0.5938.62-1","117.0.5938.62-1~deb11u1","117.0.5938.62-1~deb12u1","117.0.5938.92-1","118.0.5993.117-1","118.0.5993.117-1~deb11u1","118.0.5993.117-1~deb12u1","118.0.5993.70-1","118.0.5993.70-1~deb11u1","118.0.5993.70-1~deb12u1","119.0.6045.105-1","119.0.6045.105-1~deb11u1","119.0.6045.105-1~deb12u1","119.0.6045.123-1","119.0.6045.123-1~deb11u1","119.0.6045.123-1~deb12u1","119.0.6045.159-1","119.0.6045.159-1~deb11u1","119.0.6045.159-1~deb12u1","119.0.6045.199-1","119.0.6045.199-1~deb11u1","119.0.6045.199-1~deb12u1","120.0.6099.109-1","120.0.6099.109-1~deb11u1","120.0.6099.109-1~deb12u1","120.0.6099.129-1","120.0.6099.129-1~deb11u1","120.0.6099.129-1~deb12u1","120.0.6099.199-1","120.0.6099.199-1~deb11u1","120.0.6099.199-1~deb12u1","120.0.6099.216-1","120.0.6099.216-1~deb11u1","120.0.6099.216-1~deb12u1","120.0.6099.224-1","120.0.6099.224-1~deb11u1","120.0.6099.224-1~deb12u1","120.0.6099.224-2","120.0.6099.71-1","120.0.6099.71-1~deb11u1","120.0.6099.71-1~deb12u1","121.0.6167.139-1","121.0.6167.139-1~deb12u1","121.0.6167.160-1","121.0.6167.160-1~deb12u1","121.0.6167.85-1","121.0.6167.85-1~deb12u1","122.0.6261.111-1","122.0.6261.111-1~deb12u1","122.0.6261.128-1","122.0.6261.128-1~deb12u1","122.0.6261.57-1","122.0.6261.57-1~deb12u1","122.0.6261.94-1","122.0.6261.94-1~deb12u1","123.0.6312.105-1","123.0.6312.105-1~deb12u1","123.0.6312.105-1~deb13u1","123.0.6312.105-2","123.0.6312.122-1","123.0.6312.122-1~deb12u1","123.0.6312.58-1","123.0.6312.86-1","123.0.6312.86-1~deb12u1","124.0.6367.118-1","124.0.6367.118-1~deb12u1","124.0.6367.155-1","124.0.6367.155-1~deb12u1","124.0.6367.201-1","124.0.6367.201-1~deb12u1","124.0.6367.207-1","124.0.6367.207-1~deb12u1","124.0.6367.60-1","124.0.6367.60-1~deb12u1","124.0.6367.60-2","124.0.6367.78-1","124.0.6367.78-1~deb12u1","125.0.6422.112-1","125.0.6422.112-1~deb12u1","125.0.6422.141-1","125.0.6422.141-1~deb12u1","125.0.6422.60-1","125.0.6422.60-1~deb12u1","125.0.6422.76-1","125.0.6422.76-1~deb12u1","126.0.6478.114-1","126.0.6478.114-1~deb12u1","126.0.6478.126-1","126.0.6478.126-1~deb12u1","126.0.6478.126-1~deb13u1","126.0.6478.182-1","126.0.6478.182-1~deb12u1","126.0.6478.56-1","126.0.6478.56-1~deb12u1"]},{"source":"osv","ecosystem":"Debian:13","package":"chromium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"127.0.6533.88-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"chromium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"127.0.6533.88-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"chromium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"127.0.6533.88-1~deb12u1"}]}],"versions":["113.0.5672.126-1","114.0.5735.106-1","114.0.5735.106-1~deb11u1","114.0.5735.106-1~deb12u1","114.0.5735.133-1","114.0.5735.133-1~deb11u1","114.0.5735.133-1~deb12u1","114.0.5735.198-1","114.0.5735.198-1~deb11u1","114.0.5735.198-1~deb12u1","114.0.5735.90-1","114.0.5735.90-2","114.0.5735.90-2~deb11u1","114.0.5735.90-2~deb12u1","115.0.5790.102-1","115.0.5790.102-2","115.0.5790.170-1","115.0.5790.170-1~deb11u1","115.0.5790.170-1~deb12u1","115.0.5790.98-1","115.0.5790.98-1~deb11u1","115.0.5790.98-1~deb12u1","115.0.5790.98-2","116.0.5845.110-1","116.0.5845.110-1~deb11u1","116.0.5845.110-1~deb12u1","116.0.5845.110-2","116.0.5845.140-1","116.0.5845.140-1~deb11u1","116.0.5845.140-1~deb12u1","116.0.5845.180-1","116.0.5845.180-1~deb11u1","116.0.5845.180-1~deb12u1","116.0.5845.96-1","116.0.5845.96-1~deb11u1","116.0.5845.96-1~deb12u1","116.0.5845.96-2","117.0.5938.132-1","117.0.5938.132-1~deb11u1","117.0.5938.132-1~deb12u1","117.0.5938.132-2","117.0.5938.149-1","117.0.5938.149-1~deb11u1","117.0.5938.149-1~deb12u1","117.0.5938.62-1","117.0.5938.62-1~deb11u1","117.0.5938.62-1~deb12u1","117.0.5938.92-1","118.0.5993.117-1","118.0.5993.117-1~deb11u1","118.0.5993.117-1~deb12u1","118.0.5993.70-1","118.0.5993.70-1~deb11u1","118.0.5993.70-1~deb12u1","119.0.6045.105-1","119.0.6045.105-1~deb11u1","119.0.6045.105-1~deb12u1","119.0.6045.123-1","119.0.6045.123-1~deb11u1","119.0.6045.123-1~deb12u1","119.0.6045.159-1","119.0.6045.159-1~deb11u1","119.0.6045.159-1~deb12u1","119.0.6045.199-1","119.0.6045.199-1~deb11u1","119.0.6045.199-1~deb12u1","120.0.6099.109-1","120.0.6099.109-1~deb11u1","120.0.6099.109-1~deb12u1","120.0.6099.129-1","120.0.6099.129-1~deb11u1","120.0.6099.129-1~deb12u1","120.0.6099.199-1","120.0.6099.199-1~deb11u1","120.0.6099.199-1~deb12u1","120.0.6099.216-1","120.0.6099.216-1~deb11u1","120.0.6099.216-1~deb12u1","120.0.6099.224-1","120.0.6099.224-1~deb11u1","120.0.6099.224-1~deb12u1","120.0.6099.224-2","120.0.6099.71-1","120.0.6099.71-1~deb11u1","120.0.6099.71-1~deb12u1","121.0.6167.139-1","121.0.6167.139-1~deb12u1","121.0.6167.160-1","121.0.6167.160-1~deb12u1","121.0.6167.85-1","121.0.6167.85-1~deb12u1","122.0.6261.111-1","122.0.6261.111-1~deb12u1","122.0.6261.128-1","122.0.6261.128-1~deb12u1","122.0.6261.57-1","122.0.6261.57-1~deb12u1","122.0.6261.94-1","122.0.6261.94-1~deb12u1","123.0.6312.105-1","123.0.6312.105-1~deb12u1","123.0.6312.105-1~deb13u1","123.0.6312.105-2","123.0.6312.122-1","123.0.6312.122-1~deb12u1","123.0.6312.58-1","123.0.6312.86-1","123.0.6312.86-1~deb12u1","124.0.6367.118-1","124.0.6367.118-1~deb12u1","124.0.6367.155-1","124.0.6367.155-1~deb12u1","124.0.6367.201-1","124.0.6367.201-1~deb12u1","124.0.6367.207-1","124.0.6367.207-1~deb12u1","124.0.6367.60-1","124.0.6367.60-1~deb12u1","124.0.6367.60-2","124.0.6367.78-1","124.0.6367.78-1~deb12u1","125.0.6422.112-1","125.0.6422.112-1~deb12u1","125.0.6422.141-1","125.0.6422.141-1~deb12u1","125.0.6422.60-1","125.0.6422.60-1~deb12u1","125.0.6422.76-1","125.0.6422.76-1~deb12u1","126.0.6478.114-1","126.0.6478.114-1~deb12u1","126.0.6478.126-1","126.0.6478.126-1~deb12u1","126.0.6478.126-1~deb13u1","126.0.6478.182-1","126.0.6478.182-1~deb12u1","126.0.6478.56-1","126.0.6478.56-1~deb12u1"],"bundled":19},{"source":"osv","ecosystem":"Mageia:9","package":"chromium-browser-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.0.6613.137-1.mga9.tainted"}]}],"bundled":62},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP5","package":"chromium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"127.0.6533.119-bp156.2.14.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP5","package":"gn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.20240730-bp156.2.3.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP5","package":"rust-bindgen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.69.1-bp156.2.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP6","package":"chromium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"127.0.6533.119-bp156.2.14.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP6","package":"gn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.20240730-bp156.2.3.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP6","package":"rust-bindgen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.69.1-bp156.2.1"}]}],"bundled":25},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"chromium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"127.0.6533.119-bp156.2.14.1"}]}],"bundled":25},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"gn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.20240730-bp156.2.3.1"}]}],"bundled":25},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"rust-bindgen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.69.1-bp156.2.1"}]}],"bundled":25},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"chromium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"127.0.6533.119-bp156.2.14.1"}]}],"bundled":25},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"gn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.20240730-bp156.2.3.1"}]}],"bundled":25},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"rust-bindgen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.69.1-bp156.2.1"}]}],"bundled":25},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"chromium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"127.0.6533.119-1.1"}]}],"bundled":25},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"nodejs-electron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"30.4.0-1.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libqt5-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.18-1.1"}]}],"bundled":25}],"products":[{"vendor":"google","product":"chrome"}],"references":[{"url":"https://chromereleases.googleblog.com/2024/07/stable-channel-update-for-desktop_23.html","tags":["Release Notes","advisory","web"]},{"url":"https://issues.chromium.org/issues/349342289","tags":["Issue Tracking","Permissions Required","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-6989"},{"url":"https://github.com/advisories/GHSA-32j6-235r-7fmm"},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-6989","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2024-0321.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=33443","tags":["report"]},{"url":"https://chromereleases.googleblog.com/2024/09/stable-channel-update-for-desktop_24.html","tags":["web"]},{"url":"https://chromereleases.googleblog.com/2024/09/stable-channel-update-for-desktop_17.html","tags":["web"]},{"url":"https://chromereleases.googleblog.com/2024/09/stable-channel-update-for-desktop_10.html","tags":["web"]},{"url":"https://chromereleases.googleblog.com/2024/09/stable-channel-update-for-desktop.html","tags":["web"]},{"url":"https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop_28.html","tags":["web"]},{"url":"https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop_21.html","tags":["web"]},{"url":"https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop_13.html","tags":["web"]},{"url":"https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop.html","tags":["web"]},{"url":"https://chromereleases.googleblog.com/2024/07/stable-channel-update-for-desktop_30.html","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KC4DDO3O7C7P2VVA7A7WIO5RVISNZ3HV/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1228628","tags":["report"]},{"url":"https://bugzilla.suse.com/1228940","tags":["report"]},{"url":"https://bugzilla.suse.com/1228941","tags":["report"]},{"url":"https://bugzilla.suse.com/1228942","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-6988","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-6989","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-6990","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-6991","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-6992","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-6993","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-6994","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-6995","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-6996","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-6997","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-6998","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-6999","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-7000","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-7001","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-7003","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-7004","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-7005","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-7255","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-7256","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-7532","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-7533","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-7534","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-7535","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-7536","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-7550","tags":["web"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2024-6776","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-3157","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-3516","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-3837","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-3839","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-3914","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-4058","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-45492","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-4558","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-4761","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-5158","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-5496","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-5846","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-6291","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-7965","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-7967","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-7971","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-8198","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-8636","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-9123","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-9602","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-9603","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2024-6989","description":"Use after free in Loader in Google Chrome prior to 127.0.6533.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)","status":"published","published":"2024-08-06T15:37:21.882Z","modified":"2024-08-07T20:01:16.158Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-416","CWE-416"],"updated_at":"2026-11-02T14:34:11.305983Z"}],"euvd":[{"id":"EUVD-2024-47968","description":"Use after free in Loader in Google Chrome prior to 127.0.6533.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)","status":"published","published":"2024-08-06T15:37:21Z","modified":"2024-08-07T20:01:16Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T01:15:46.66518Z"}],"ghsa":[{"id":"GHSA-32j6-235r-7fmm","title":"Use after free in Loader in Google Chrome prior to 127.0.6533.72 allowed a remote attacker to...","description":"Use after free in Loader in Google Chrome prior to 127.0.6533.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)","status":"published","published":"2024-08-06T18:30:57Z","modified":"2024-08-07T21:31:45Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:57:53.484343Z"}],"nvd":[{"id":"CVE-2024-6989","description":"Use after free in Loader in Google Chrome prior to 127.0.6533.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)","status":"published","published":"2024-08-06T16:15:49.957Z","modified":"2026-06-17T08:19:08.253Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:10:17.832118Z"}],"osv":[{"id":"CVE-2024-6989","description":"Use after free in Loader in Google Chrome prior to 127.0.6533.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)","status":"published","published":"2024-08-06T16:15:49.957Z","modified":"2026-07-01T12:45:01.763578513Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:45.405014Z"},{"id":"DEBIAN-CVE-2024-6989","description":"Use after free in Loader in Google Chrome prior to 127.0.6533.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)","status":"published","published":"2024-08-06T16:15:49.957Z","modified":"2026-11-02T12:03:11.927162089Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:44.747956Z"},{"id":"DSA-5735-1","title":"chromium - security update","status":"published","published":"2024-07-31T00:00:00Z","modified":"2026-03-09T02:10:01.285526Z","updated_at":"2026-11-02T15:46:17.892347Z"},{"id":"MGASA-2024-0321","title":"Updated chromium-browser-stable packages fix security vulnerabilities","description":"Use after free in Downloads. (CVE-2024-6988)\nUse after free in Loader. (CVE-2024-6989)\nUse after free in Dawn. (CVE-2024-6991)\nHeap buffer overflow in Layout. (CVE-2024-6994)\nInappropriate implementation in Fullscreen. (CVE-2024-6995)\nRace in Frames. (CVE-2024-6996)\nUse after free in Tabs. (CVE-2024-6997)\nUse after free in User Education. (CVE-2024-6998)\nInappropriate implementation in FedCM. (CVE-2024-6999)\nUse after free in CSS. (CVE-2024-7000)\nInappropriate implementation in HTML. (CVE-2024-7001)\nInappropriate implementation in FedCM. (CVE-2024-7003)\nInsufficient validation of untrusted input in Safe Browsing.\n(CVE-2024-7004)\nInsufficient validation of untrusted input in Safe Browsing.\n(CVE-2024-7005)\nUninitialized Use in Dawn. (CVE-2024-6990)\nOut of bounds read in WebTransport. (CVE-2024-7255)\nInsufficient data validation in Dawn. (CVE-2024-7256)\nOut of bounds memory access in ANGLE. (CVE-2024-7532)\nUse after free in Sharing. (CVE-2024-7533)\nType Confusion in V8. (CVE-2024-7550)\nHeap buffer overflow in Layout. (CVE-2024-7534)\nInappropriate implementation in V8. (CVE-2024-7535)\nUse after free in WebAudio. (CVE-2024-7536)\nUse after free in Passwords. (CVE-2024-7964)\nInappropriate implementation in V8. (CVE-2024-7965)\nOut of bounds memory access in Skia. (CVE-2024-7966)\nHeap buffer overflow in Fonts. (CVE-2024-7967)\nUse after free in Autofill. (CVE-2024-7968)\nType confusion in V8. (CVE-2024-7971)\nInappropriate implementation in V8. (CVE-2024-7972)\nHeap buffer overflow in PDFium. (CVE-2024-7973)\nInsufficient data validation in V8 API. (CVE-2024-7974)\nInappropriate implementation in Permissions. (CVE-2024-7975)\nInappropriate implementation in FedCM. (CVE-2024-7976)\nInsufficient data validation in Installer. (CVE-2024-7977)\nInsufficient policy enforcement in Data Transfer. (CVE-2024-7978)\nInsufficient data validation in Installer. (CVE-2024-7979)\nInsufficient data validation in Installer. (CVE-2024-7980)\nInappropriate implementation in Views. (CVE-2024-7981)\nType Confusion in V8. (CVE-2024-7969)\nHeap buffer overflow in Skia. (CVE-2024-8193)\nType Confusion in V8. (CVE-2024-8194)\nHeap buffer overflow in Skia. (CVE-2024-8198)\nUse after free in WebAudio. (CVE-2024-8362)\nOut of bounds write in V8. (CVE-2024-7970)\nHeap buffer overflow in Skia. (CVE-2024-8636)\nUse after free in Media Router. (CVE-2024-8637)\nType Confusion in V8. (CVE-2024-8638)\nUse after free in Autofill. (CVE-2024-8639)\nType Confusion in V8. (CVE-2024-8904)\nInappropriate implementation in V8. (CVE-2024-8905)\nIncorrect security UI in Downloads. (CVE-2024-8906)\nInsufficient data validation in Omnibox. (CVE-2024-8907)\nInappropriate implementation in Autofill. (CVE-2024-8908)\nInappropriate implementation in UI. (CVE-2024-8909)\nInappropriate implementation in V8. (CVE-2024-9121)\nType Confusion in V8. (CVE-2024-9122)\nInteger overflow in Skia. (CVE-2024-9123)\n","status":"published","published":"2024-10-04T05:27:04Z","modified":"2026-04-16T04:44:07.052112124Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"openSUSE-SU-2024:0254-2","title":"Security update for chromium, gn, rust-bindgen","description":"This update for chromium, gn, rust-bindgen fixes the following issues:\n\n- Chromium 127.0.6533.119 (boo#1228941)\n\n  * CVE-2024-7532: Out of bounds memory access in ANGLE\n  * CVE-2024-7533: Use after free in Sharing\n  * CVE-2024-7550: Type Confusion in V8\n  * CVE-2024-7534: Heap buffer overflow in Layout\n  * CVE-2024-7535: Inappropriate implementation in V8\n  * CVE-2024-7536: Use after free in WebAudio\n\n- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)\n\n  * CVE-2024-6988: Use after free in Downloads\n  * CVE-2024-6989: Use after free in Loader\n  * CVE-2024-6991: Use after free in Dawn\n  * CVE-2024-6992: Out of bounds memory access in ANGLE\n  * CVE-2024-6993: Inappropriate implementation in Canvas\n  * CVE-2024-6994: Heap buffer overflow in Layout\n  * CVE-2024-6995: Inappropriate implementation in Fullscreen\n  * CVE-2024-6996: Race in Frames\n  * CVE-2024-6997: Use after free in Tabs\n  * CVE-2024-6998: Use after free in User Education\n  * CVE-2024-6999: Inappropriate implementation in FedCM\n  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous\n  * CVE-2024-7001: Inappropriate implementation in HTML\n  * CVE-2024-7003: Inappropriate implementation in FedCM\n  * CVE-2024-7004: Insufficient validation of untrusted input\n    in Safe Browsing\n  * CVE-2024-7005: Insufficient validation of untrusted input\n    in Safe Browsing\n  * CVE-2024-6990: Uninitialized Use in Dawn\n  * CVE-2024-7255: Out of bounds read in WebTransport\n  * CVE-2024-7256: Insufficient data validation in Dawn\n\ngh:\n\n- Update to version 0.20240730:\n  * Rust: link_output, depend_output and runtime_outputs for dylibs\n  * Add missing reference section to function_toolchain.cc\n  * Do not cleanup args.gn imports located in the output directory.\n  * Fix expectations in NinjaRustBinaryTargetWriterTest.SwiftModule\n  * Do not add native dependencies to the library search path\n  * Support linking frameworks and swiftmodules in Rust targets\n  * [desc] Silence print() statements when outputing json\n  * infra: Move CI/try builds to Ubuntu-22.04\n  * [MinGW] Fix mingw building issues\n  * [gn] Fix 'link' in the //examples/simple_build/build/toolchain/BUILD.gn\n  * [template] Fix 'rule alink_thin' in the //build/build_linux.ninja.template\n  * Allow multiple --ide switches\n  * [src] Add '#include \u003climits\u003e' in the //src/base/files/file_enumerator_win.cc\n  * Get updates to infra/recipes.py from upstream\n  * Revert 'Teach gn to handle systems with \u003e 64 processors'\n  * [apple] Rename the code-signing properties of create_bundle\n  * Fix a typo in 'gn help refs' output\n  * Revert '[bundle] Use 'phony' builtin tool for create_bundle targets'\n  * [bundle] Use 'phony' builtin tool for create_bundle targets\n  * [ios] Simplify handling of assets catalog\n  * [swift] List all outputs as deps of 'source_set' stamp file\n  * [swift] Update `gn check ...` to consider the generated header\n  * [swift] Set `restat = 1` to swift build rules\n  * Fix build with gcc12\n  * [label_matches] Add new functions label_matches(), filter_labels_include() and filter_labels_exclude()\n  * [swift] Remove problematic use of 'stamp' tool\n  * Implement new --ninja-outputs-file option.\n  * Add NinjaOutputsWriter class\n  * Move InvokePython() function to its own source file.\n  * zos: build with -DZOSLIB_OVERRIDE_CLIB to override creat\n  * Enable C++ runtime assertions in debug mode.\n  * Fix regression in MakeRelativePath()\n  * fix: Fix Windows MakeRelativePath.\n  * Add long path support for windows\n  * Ensure read_file() files are considered by 'gn analyze'\n  * apply 2to3 to for some Python scripts\n  * Add rustflags to desc and help output\n  * strings: support case insensitive check only in StartsWith/EndsWith\n  * add .git-blame-ignore-revs\n  * use std::{string,string_view}::{starts_with,ends_with}\n  * apply clang-format to all C++ sources\n  * add forward declaration in rust_values.h\n  * Add `root_patterns` list to build configuration.\n  * Use c++20 in GN build\n  * update windows sdk to 2024-01-11\n  * update windows sdk\n  * Add linux-riscv64.\n  * Update OWNERS list.\n  * remove unused function\n  * Ignore build warning -Werror=redundant-move\n  * Fix --as=buildfile `gn desc deps` output.\n  * Update recipe engine to 9dea1246.\n  * treewide: Fix spelling mistakes\n\nAdded rust-bindgen:\n\n- Version 0.69.1\n","status":"published","published":"2024-08-18T22:20:17Z","modified":"2026-02-04T03:07:53.445797Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"openSUSE-SU-2024:14272-1","title":"chromedriver-127.0.6533.119-1.1 on GA media","description":"These are all security issues fixed in the chromedriver-127.0.6533.119-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-08-18T00:00:00Z","modified":"2025-05-07T18:16:30.488627Z","updated_at":"2026-11-02T16:58:36.662953Z"},{"id":"openSUSE-SU-2024:14276-1","title":"nodejs-electron-30.4.0-1.1 on GA media","description":"These are all security issues fixed in the nodejs-electron-30.4.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-08-20T00:00:00Z","modified":"2026-02-04T02:59:26.476627Z","updated_at":"2026-11-02T16:58:36.662953Z"},{"id":"openSUSE-SU-2024:14548-1","title":"libQt5Pdf5-5.15.18-1.1 on GA media","description":"These are all security issues fixed in the libQt5Pdf5-5.15.18-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-12-05T00:00:00Z","modified":"2025-05-07T18:16:01.492807Z","updated_at":"2026-11-02T16:58:36.976155Z"}]}}