PT-2024-3276 · Google+4 · Google Chrome+4
Edouard Bochin
+3
·
Published
2024-04-02
·
Updated
2026-03-14
·
CVE-2024-3159
CVSS v2.0
10
High
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 123.0.6312.105
Description
The issue is related to out of bounds memory access in the V8 engine of Google Chrome, allowing a remote attacker to perform arbitrary read/write via a crafted HTML page. This can lead to remote code execution. The vulnerability was demonstrated at Pwn2Own 2024, where it was successfully exploited, and the attackers earned $42,500. The Chromium security severity of this issue is High.
Recommendations
For Google Chrome versions prior to 123.0.6312.105, update to version 123.0.6312.105 or later to resolve the issue. As a temporary workaround, consider restricting access to potentially vulnerable web pages until the update is applied. Avoid using Google Chrome to access untrusted websites or HTML pages until the issue is resolved.
Exploit
Fix
Out of bounds Read
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Debian
Google Chrome
Red Os