{ "id": "CVE-2024-6998", "sourceIdentifier": "chrome-cve-admin@google.com", "published": "2024-08-06T16:15:50.427", "lastModified": "2024-08-06T16:30:24.547", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ { "lang": "en", "value": "Use after free in User Education in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)" } ], "metrics": {}, "weaknesses": [ { "source": "chrome-cve-admin@google.com", "type": "Secondary", "description": [ { "lang": "en", "value": "CWE-416" } ] } ], "references": [ { "url": "https://chromereleases.googleblog.com/2024/07/stable-channel-update-for-desktop_23.html", "source": "chrome-cve-admin@google.com" }, { "url": "https://issues.chromium.org/issues/340098902", "source": "chrome-cve-admin@google.com" } ] }