PT-2024-1165 · Google+4 · Google Chrome+5
Smartkeyss
·
Published
2024-01-06
·
Updated
2025-02-27
·
CVE-2024-0517
CVSS v2.0
10
High
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 120.0.6099.224
Description
The issue is related to an out-of-bounds write in the V8 JavaScript engine, which could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. This could lead to arbitrary code execution. Technical details and proof-of-concept have emerged, indicating that threat actors could exploit this flaw to achieve remote code execution.
Recommendations
For Google Chrome versions prior to 120.0.6099.224, update to version 120.0.6099.224 or later to resolve the issue. As a temporary workaround, consider restricting access to potentially vulnerable API endpoints or disabling the use of the V8 JavaScript engine until a patch is applied. However, the most effective resolution is to update the browser to the latest version.
Exploit
Fix
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Google Chrome
Red Os
Suse
V8 Javascript Engine