# CVE-2024-0806: Chromium: CVE-2024-0806 Use after free in Passwords

CVE-2024-0806 is fixed in 4 products on 2 platforms, first by DEBIAN-CVE-2024-0806, released January 24, 2024. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2024-0806
- Priority: High
- CVSS: 8.8 (high)
- EPSS: 0.0045
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Jan 24, 2024
- Weakness: CWE-416: Use After Free
- Vendor advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-0806

## Description

<p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2024">Google Chrome Releases</a> for more information.</p>

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Windows apps | Microsoft Edge | 121.0.2277.112 | [Microsoft Edge 121.0.2277.112](https://patchblox.com/security/data/fix/windows-app/microsoft.edge-121.0.2277.112.md) | Feb 5, 2024 |
| Windows apps | Microsoft Edge Beta | 127.0.2651.8 | [Microsoft Edge Beta 127.0.2651.8](https://patchblox.com/security/data/fix/windows-app/microsoft.edge.beta-127.0.2651.8.md) | Jun 21, 2024 |
| Windows apps | Microsoft Edge Dev | 127.0.2651.8 | [Microsoft Edge Dev 127.0.2651.8](https://patchblox.com/security/data/fix/windows-app/microsoft.edge.dev-127.0.2651.8.md) | Jun 21, 2024 |
| Linux | chromium Debian 12.15 (bookworm) | 121.0.6167.85-1~deb12u1 | [DEBIAN-CVE-2024-0806](https://patchblox.com/security/data/fix/linux/debian-cve-2024-0806.md) | Jan 24, 2024 |
| Linux | chromium Debian 13.5 (trixie) | 121.0.6167.85-1 | [DEBIAN-CVE-2024-0806](https://patchblox.com/security/data/fix/linux/debian-cve-2024-0806.md) | Jan 24, 2024 |
| Linux | chromium Debian 14 | 121.0.6167.85-1 | [DEBIAN-CVE-2024-0806](https://patchblox.com/security/data/fix/linux/debian-cve-2024-0806.md) | Jan 24, 2024 |

---

Data as of 2026-11-07T12:40:37Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo