CVE-2024-0806
Chromium: CVE-2024-0806 Use after free in Passwords
CVE-2024-0806 is fixed in 4 products on 2 platforms, first by DEBIAN-CVE-2024-0806, released January 24, 2024. It is not reported as exploited. Patch Radar priority: High.
HighFixed on 2 platforms
CVSS
8.8
high
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0045
39th percentile
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2024">Google Chrome Releases</a> for more information.</p>
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Windows apps | |||
| Microsoft Edge | 121.0.2277.112 | Microsoft Edge 121.0.2277.112 | Feb 5, 2024 |
| Microsoft Edge Beta | 127.0.2651.8 | Microsoft Edge Beta 127.0.2651.8 | Jun 21, 2024 |
| Microsoft Edge Dev | 127.0.2651.8 | Microsoft Edge Dev 127.0.2651.8 | Jun 21, 2024 |
| Linux | |||
| chromium · Debian 12.15 (bookworm) | 121.0.6167.85-1~deb12u1 | DEBIAN-CVE-2024-0806 | Jan 24, 2024 |
| chromium · Debian 13.5 (trixie) | 121.0.6167.85-1 | DEBIAN-CVE-2024-0806 | Jan 24, 2024 |
| chromium · Debian 14 | 121.0.6167.85-1 | DEBIAN-CVE-2024-0806 | Jan 24, 2024 |