CVE-2024-0808: Debian Linux

Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days.

Integer underflow in WebUI in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via a malicious file. (Chromium security severity: High)

Affected products

  • Debian Debian Linux: version 11.0 only
  • Fedoraproject Fedora: version 38 only; version 39 only
  • Google Chrome: before 121.0.6167.85 (fixed in 121.0.6167.85)

Published 2024-01-24. Last modified 2026-06-17.