8.8

CVE-2024-3156: google chrome Out-of-bounds Read

CVSS: 8.8v3.1HighModified
AliasesDEBIAN-CVE-2024-3156CGA-32cp-v6jv-2hccCGA-qrp6-h4cm-w4fj
Published 06-04-2024Last modified 04-11-2025
Open JSON

Vulnerability summary

CVE-2024-3156 is a high (CVSS 8.8) Out-of-bounds Read vulnerability in google chrome. EPSS estimates a 12.95% chance of exploitation in the next 30 days, higher than 96.3% of scored vulnerabilities.

Overall risk
38/100
0100
Medium · default modelHow is this calculated?
CVSS score
8.8/10
010
High · v3.1 (CVE.org)
EPSS score
12.95%
0%100%
Medium · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 3 · Related 3
DSA-5654-1MGASA-2024-0109OPENSUSE-SU-2024:13953-1CGA-Q438-45X9-R4JMCGA-QJWV-VV9F-87MJ

Timeline

  1. 06-04-2024
    PublishedVulnerability first disclosed.
  2. 04-11-2025
    Last modifiedVulnerability information updated.

Description

Inappropriate implementation in V8 in Google Chrome prior to 123.0.6312.105 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

CVSS metrics

5 scores · 5 sources · 1 version

EPSS trend

Probability

12.95%

Chance of exploitation in the next 30 days

Percentile

96%

Versus all other CVEs

30-day change

0.00 pp

From 12.95% on 22-09-2026

22-09-202622-10-2026
EPSS score
12.95%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Chainguard1 product
  • chromium< 123.0.6312.105-r0
Debian1 product
  • chromium< 123.0.6312.105-1~deb12u1 | < 123.0.6312.105-1
Google1 product
  • chrome≥ 123.0.6312.105, < 123.0.6312.105 | < 123.0.6312.105
Wolfi1 product
  • chromium< 123.0.6312.105-r0

4 vendors · 4 products

References

5 links