CVE-2024-4331
Chromium: CVE-2024-4331 Use after free in Picture In Picture
CVE-2024-4331 is fixed in 5 products on 2 platforms, first by DEBIAN-CVE-2024-4331, released May 1, 2024. It is not reported as exploited. Patch Radar priority: High.
HighFixed on 2 platforms
CVSS
8.8
high
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0122
68th percentile
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2024">Google Chrome Releases</a> for more information.</p>
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Windows apps | |||
| Microsoft Edge | 124.0.2478.80 | Microsoft Edge 124.0.2478.80 | May 2, 2024 |
| Microsoft Edge Beta | 127.0.2651.8 | Microsoft Edge Beta 127.0.2651.8 | Jun 21, 2024 |
| Microsoft Edge Dev | 127.0.2651.8 | Microsoft Edge Dev 127.0.2651.8 | Jun 21, 2024 |
| Microsoft Edge WebView2 Runtime | 125.0.2535.67 | Microsoft Edge WebView2 Runtime 125.0.2535.67 | May 24, 2024 |
| Linux | |||
| chromium · Debian 12.15 (bookworm) | 124.0.6367.118-1~deb12u1 | DSA-5676-1 | May 2, 2024 |
| chromium · Debian 13.5 (trixie) | 124.0.6367.118-1 | DEBIAN-CVE-2024-4331 | May 1, 2024 |
| chromium · Debian 14 | 124.0.6367.118-1 | DEBIAN-CVE-2024-4331 | May 1, 2024 |