Google · Google Chrome · CVE-2024-10488
**Name of the Vulnerable Software and Affected Versions**
Google Chrome versions prior to 130.0.6723.92
Microsoft Edge versions prior to the fixed version (affected versions not specified)
**Description**
The issue is related to a use-after-free vulnerability in the implementation of WebRTC technology in Google Chrome and Microsoft Edge browsers. This vulnerability can be exploited by a remote attacker using a specially crafted HTML page, potentially allowing them to impact the confidentiality, integrity, and availability of data. The vulnerability is associated with heap corruption.
**Recommendations**
For Google Chrome versions prior to 130.0.6723.92, update to version 130.0.6723.92 or later to resolve the issue.
For Microsoft Edge, apply the latest security update that fixes the WebRTC vulnerability.
As a temporary workaround, consider restricting access to WebRTC functionality until a patch is available.