CVE-2024-12694 - AskarLabs CVE Database

CVE-2024-12694

Vendor Google

Product Chrome

Weakness CWE-416

Published December 18, 2024

Last update January 3, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Use after free in Compositing in Google Chrome prior to 131.0.6778.204 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Key dates

02Disclosure timeline

December 18, 2024 CVE published

January 3, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-12694 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/416.html

Related vulnerabilities

04Related CVE

CVE-2021-28639 Adobe Acrobat Reader DC setAction Use-After-Free Remote Code Execution Vulnerability CVE-2023-26226 A use after free memory corruption issue exists in Yandex Browser for Desktop prior to version 24.4.0.682 CVE-2026-9891 CVE-2026-11305 CVE-2026-34340 Windows Projected File System Elevation of Privilege Vulnerability