Google · Google Chrome · CVE-2024-3837
**Name of the Vulnerable Software and Affected Versions**
Google Chrome versions prior to 124.0.6367.60
Microsoft Edge (affected versions not specified)
**Description**
The issue is related to a use after free vulnerability in the QUIC protocol implementation, which could allow a remote attacker who has compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. This may enable the attacker to access confidential information.
**Recommendations**
For Google Chrome versions prior to 124.0.6367.60, update to version 124.0.6367.60 or later to resolve the issue.
For Microsoft Edge, at the moment, there is no information about a newer version that contains a fix for this vulnerability.