High severity8.8NVD Advisory· Published Jan 30, 2024· Updated Jun 17, 2026
CVE-2024-1060
CVE-2024-1060
Description
Use after free in Canvas in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5- osv-coords2 versionspkg:rpm/opensuse/chromium&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/opera&distro=openSUSE%20Leap%2015.5%20NonFree
< 121.0.6167.184-1.1+ 1 more
- (no CPE)range: < 121.0.6167.184-1.1
- (no CPE)range: < 107.0.5045.21-lp155.3.36.1
Patches
Vulnerability mechanics
References
4- chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop_30.htmlnvdRelease NotesVendor Advisory
- crbug.com/1511567nvdIssue TrackingPermissions RequiredVendor Advisory
- lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NEUXJY3YC3VGIJW2AOHL4NZ7ZK7BRYWY/nvdMailing List
- lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XCVKRHRWPMITSVFBHQBSNXOVJAKT547Q/nvdMailing List
News mentions
0No linked articles in our index yet.