CVE-2024-29943: Out-of-bounds access via Range Analysis bypass CVE-2024-29944: Privileged JavaScript Execution via Event Handlers