{"id":"CVE-2024-4671","kind":"vulnerability","aliases":["CVE-2024-4671"],"related":[],"title":"Use after free in Visuals in Google Chrome prior to 124.0.6367.201 allowed a remote attacker who had compromised the…","description":"Google Chromium Visuals contains a use-after-free vulnerability that allows a remote attacker to exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.\n\nCISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","summary":"A use-after-free bug in the Visuals component of Google Chromium lets a remote attacker corrupt heap memory by getting a victim to load a crafted HTML page. Exploitation in the wild is confirmed by CISA, so an attacker can run code in the browser process context.","severity":"critical","cvss":9.6,"epss":null,"exploited":true,"exploited_at":"2024-05-13T00:00:00+00:00","products":[{"name":"Google Chromium","fixed":[],"affected":"","ecosystem":"vendor"},{"name":"google chrome","fixed":["124.0.6367.201"],"affected":"< 124.0.6367.201","ecosystem":"vendor"},{"name":"fedoraproject fedora","fixed":[],"affected":"= 38","ecosystem":"vendor"},{"name":"fedoraproject fedora","fixed":[],"affected":"= 39","ecosystem":"vendor"},{"name":"fedoraproject fedora","fixed":[],"affected":"= 40","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["browsers","chromium","exploited","google-chrome","microsoft-edge","opera","other"],"not_affected_if":["non-chromium-browser"],"how_to_check":"Check the installed Chrome, Edge or Opera version against the vendor's fixed release for CVE-2024-4671 (version numbers unknown from sources).\nSources do not give a shell command for this check.","fix":"Update Google Chrome, Microsoft Edge, Opera and other Chromium-based browsers to the vendor's patched version.\nIf a patch is unavailable, follow vendor mitigations or stop using the affected browser.","status":"open","published_at":"2024-05-13T00:00:00+00:00","first_seen_at":"2026-10-23T19:11:51+00:00","triaged_at":"2026-10-23T21:00:46+00:00","updated_at":"2026-10-23T22:29:05+00:00","category":"other","confidence":0.7,"triage":{"at":"2026-10-23T21:00:46Z","model":"claude-haiku-5-5","output":{"fix":"Update Google Chrome, Microsoft Edge, Opera and other Chromium-based browsers to the vendor's patched version.\nIf a patch is unavailable, follow vendor mitigations or stop using the affected browser.","reach":"internet","impact":"high","summary":"A use-after-free bug in the Visuals component of Google Chromium lets a remote attacker corrupt heap memory by getting a victim to load a crafted HTML page. Exploitation in the wild is confirmed by CISA, so an attacker can run code in the browser process context.","category":"other","who_cares":["chromium","google-chrome","microsoft-edge","opera","browsers"],"confidence":0.7,"needs_auth":"no","worst_case":"Attacker runs code by luring a user to a crafted web page","analyst_note":"Confirm fixed Chromium version and patch date from the Chrome Releases blog or the CISA KEV entry, since the sources give no version numbers.","how_to_check":"Check the installed Chrome, Edge or Opera version against the vendor's fixed release for CVE-2024-4671 (version numbers unknown from sources).\nSources do not give a shell command for this check.","needs_analyst":true,"not_affected_if":["non-chromium-browser"],"user_interaction":"yes","needs_special_setup":"no","severity_if_unknown":"high"},"cost_usd":0.000519,"input_tokens":2861,"output_tokens":465,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2024':20A,23A '-4671':21A,24A '124.0.6367.201':11A 'action':141C 'affect':121C 'allow':12A,105C 'appli':142C 'attack':15A,61B,85B,108C 'browser':35B,91B,124C 'bug':50B 'chrome':8A,28A,40B,134C 'chromium':26A,36B,57B,95C,127C 'cisa':82B,139C 'code':88B 'compon':54B 'compromis':18A 'confirm':80B 'contain':97C 'context':93B 'corrupt':62B,112C 'could':120C 'craft':72B,115C 'cve':19A,22A 'discontinu':148C 'edg':43B,136C 'exploit':37B,75B,110C 'fedora':30A,32A,34A 'fedoraproject':29A,31A,33A 'free':3A,49B,102C 'get':66B 'googl':7A,39B,56B,94C,133C 'google':25A,27A 'google-chrom':38B 'heap':63B,111C 'html':73B,116C 'includ':128C 'instruct':146C 'let':58B 'limit':131C 'load':70B 'memori':64B 'microsoft':42B,135C 'microsoft-edg':41B 'mitig':143C,154C 'multipl':122C 'opera':44B,138C 'page':74B,117C 'per':144C 'prior':9A 'process':92B 'product':152C 'remot':14A,60B,107C 'requir':140C 'run':87B 'unavail':156C 'use':1A,47B,100C,149C 'use-after-fre':46B,99C 'util':126C 'vendor':145C 'via':113C 'victim':68B 'visual':5A,53B,96C 'vulner':103C,119C 'web':123C 'wild':78B","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2024-05-13T00:00:00+00:00","kev":{"dateAdded":"2024-05-13","dueDate":"2024-06-03","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2024-4671","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-4671","severity":null,"published_at":"2024-05-13T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:51+00:00","fetched_at":"2026-10-25T12:39:22+00:00","note":null},{"source":"nvd","external_id":"CVE-2024-4671","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-4671","severity":null,"published_at":"2024-05-14T15:44:15+00:00","modified_at":"2026-06-17T08:02:22+00:00","first_seen_at":"2026-10-23T22:29:05+00:00","fetched_at":"2026-10-23T22:29:05+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}