CVE-2024-11920

Medium · 4.3

CVSS

4.3

EPSS

0.2%

Published

Nov 14, 2025

CISA due date

—

The record

Inappropriate implementation in Dawn in Google Chrome on Mac prior to 130.0.6723.92 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

Affected packages

Ecosystem	Package	Introduced	Fixed