CVE-2024-9958: MEDIUM Inappropriate implementation in PictureInPicture.

Reference Links

• https://chromereleases.googleblog.com/2024/10/stable-channel-update-for-desktop_15.html
• https://issues.chromium.org/issues/40076120
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-9958 (Advisory)
• https://chromereleases.googleblog.com/2024/10/stable-channel-update-for-chromeos_29.html (Advisory)

Parent vulnerabilities

(Appears in the following advisories)

• 3335538213862105157

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2024-7006
• CVE-2024-47076
• CVE-2024-47175
• CVE-2024-47176
• CVE-2024-47177
• CVE-2024-9959
• CVE-2024-9954
• CVE-2024-9966
• CVE-2024-10487
• CVE-2024-10488
• CVE-2024-10229
• CVE-2024-10230
• CVE-2024-10231
• CVE-2024-9962
• CVE-2024-9964
• CVE-2024-9960
• CVE-2024-9963

Frequently Asked Questions

• What is the severity of CVE-2024-9958?

  CVE-2024-9958 has been classified with a severity rating that indicates a potential risk to users of affected applications.

• How do I fix CVE-2024-9958?

  To mitigate CVE-2024-9958, update your Google Chrome to version 130.0.6723.58 or higher, or update Microsoft Edge to version 130.0.2849.46 or higher.

• Which software is affected by CVE-2024-9958?

  CVE-2024-9958 affects Google Chrome versions prior to 130.0.6723.58 and Microsoft Edge (Chromium-based) versions prior to 130.0.2849.46.

• Is CVE-2024-9958 a zero-day vulnerability?

  CVE-2024-9958 was publicly disclosed, which indicates it may be actively exploited, but specifics about its zero-day status depend on the current threat landscape.

• What type of vulnerability is CVE-2024-9958?

  CVE-2024-9958 is categorized as an inappropriate input validation vulnerability that could lead to various security issues.