PT-2024-2439 · Google+5 · Google Chrome+6

Cassidy6564

·

Published

2024-03-26

·

Updated

2025-04-02

·

CVE-2024-2883

CVSS v2.0

10

High

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 123.0.6312.86
Description The issue is related to a use after free vulnerability in the ANGLE library of Google Chrome, which could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability has been reported as having an exploit in the wild and is considered critical by Chromium.
Recommendations For Google Chrome versions prior to 123.0.6312.86, update to version 123.0.6312.86 or later to address the vulnerability. As a temporary workaround, consider restricting access to potentially vulnerable API endpoints until the update is applied.

Exploit

Fix

Use After Free

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-416

Related Identifiers

ALT-PU-2024-10294
ALT-PU-2024-14286
ALT-PU-2024-14830
ALT-PU-2024-4642
ALT-PU-2024-7309
BDU:2024-02394
CVE-2024-2883
DSA-5648-1
OPENSUSE-SU-2024:0122-1
OPENSUSE-SU-2024:13846-1
OPENSUSE-SU-2024:13953-1
OPENSUSE-SU-2024_0122-1

Affected Products

Alt Linux
Angle Library
Astra Linux
Debian
Google Chrome
Red Os
Suse