Google · Google Chrome · CVE-2024-7974
**Name of the Vulnerable Software and Affected Versions**
Google Chrome versions prior to 128.0.6613.84
Microsoft Edge (affected versions not specified)
**Description**
The issue is related to insufficient data validation in the V8 API, which can be exploited by a remote attacker to potentially impact the confidentiality, integrity, and availability of protected information. This can be achieved by loading a specially crafted malicious extension. The vulnerability is associated with heap corruption via a crafted Chrome Extension.
**Recommendations**
For Google Chrome versions prior to 128.0.6613.84, update to version 128.0.6613.84 or later to resolve the issue.
For Microsoft Edge, at the moment, there is no information about a newer version that contains a fix for this vulnerability.