Search for vulnerabilities
Vulnerability details: VCID-981p-4agu-8uaf
Vulnerability ID VCID-981p-4agu-8uaf
Aliases CVE-2024-8193
Summary Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.113 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Status Published
Exploitability 0.5
Weighted Severity 7.9
Risk 4.0
Affected and Fixed Packages Package Details
Weaknesses (2)
CWE-122 Heap-based Buffer Overflow
CWE-787 Out-of-bounds Write
System Score Found at
epss 0.00313 https://api.first.org/data/v1/epss?cve=CVE-2024-8193
epss 0.00313 https://api.first.org/data/v1/epss?cve=CVE-2024-8193
epss 0.00313 https://api.first.org/data/v1/epss?cve=CVE-2024-8193
epss 0.00313 https://api.first.org/data/v1/epss?cve=CVE-2024-8193
epss 0.00313 https://api.first.org/data/v1/epss?cve=CVE-2024-8193
epss 0.00313 https://api.first.org/data/v1/epss?cve=CVE-2024-8193
epss 0.00313 https://api.first.org/data/v1/epss?cve=CVE-2024-8193
epss 0.00313 https://api.first.org/data/v1/epss?cve=CVE-2024-8193
epss 0.00313 https://api.first.org/data/v1/epss?cve=CVE-2024-8193
epss 0.00313 https://api.first.org/data/v1/epss?cve=CVE-2024-8193
epss 0.00313 https://api.first.org/data/v1/epss?cve=CVE-2024-8193
epss 0.00313 https://api.first.org/data/v1/epss?cve=CVE-2024-8193
epss 0.00313 https://api.first.org/data/v1/epss?cve=CVE-2024-8193
epss 0.00313 https://api.first.org/data/v1/epss?cve=CVE-2024-8193
epss 0.00313 https://api.first.org/data/v1/epss?cve=CVE-2024-8193
epss 0.00313 https://api.first.org/data/v1/epss?cve=CVE-2024-8193
epss 0.00313 https://api.first.org/data/v1/epss?cve=CVE-2024-8193
epss 0.00313 https://api.first.org/data/v1/epss?cve=CVE-2024-8193
epss 0.00313 https://api.first.org/data/v1/epss?cve=CVE-2024-8193
cvssv3.1 8.8 https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop_28.html
ssvc Track https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop_28.html
cvssv3.1 8.8 https://issues.chromium.org/issues/360265320
ssvc Track https://issues.chromium.org/issues/360265320
cvssv3.1 8.8 https://nvd.nist.gov/vuln/detail/CVE-2024-8193
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2024-8193
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-8193
360265320 https://issues.chromium.org/issues/360265320
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
CVE-2024-8193 https://nvd.nist.gov/vuln/detail/CVE-2024-8193
stable-channel-update-for-desktop_28.html https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop_28.html
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop_28.html
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-08-29T14:33:50Z/ Found at https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop_28.html
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at https://issues.chromium.org/issues/360265320
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-08-29T14:33:50Z/ Found at https://issues.chromium.org/issues/360265320
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2024-8193
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.53934
EPSS Score 0.00313
Published At July 30, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-31T08:39:27.689844+00:00 Alpine Linux Importer Import https://secdb.alpinelinux.org/v3.22/community.json 37.0.0