Vulnerability record/PUBLISHED/Published Jun 11, 2024 20:58:09 UTC

CVE-2024-5834

Inappropriate implementation in Dawn in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)

Base score5.6/ 10

SeverityMediumCVSS 3.1

Exploitability / impact

CVSS metric breakdown

Vector-derived attributes

Base severityMedium

Attack vectorNetworkAV

Attack complexityHighAC

Privileges requiredNonePR

User interactionNoneUI

ScopeUnchangedS

Confidentiality impactLowC

Integrity impactLowI

Availability impactLowA

CVSS vector stringCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

CVSS communicates standardized severity and impact characteristics. It does not establish whether a system is exploitable in your specific environment.

Record context

CVE Numbering AuthorityChrome

Last updatedFeb 13, 2025 17:54:29 UTC

PublishedJun 11, 2024 20:58:09 UTC

ReservedJun 11, 2024 06:12:51 UTC