PT-2024-5215 · Google+4 · Google Chrome+4
Johnshoop
·
Published
2024-01-30
·
Updated
2024-11-29
·
CVE-2024-3169
CVSS v2.0
10
High
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions:
Google Chrome versions prior to 121.0.6167.139
Description:
The issue is related to a use after free in the V8 JavaScript engine, which can lead to heap corruption. A remote attacker could potentially exploit this by using a specially crafted HTML page, allowing them to execute arbitrary code. The estimated severity of this issue is high.
Recommendations:
For versions prior to 121.0.6167.139, update to version 121.0.6167.139 or later to resolve the issue. As a temporary workaround, consider restricting access to potentially vulnerable HTML pages until the update is applied.
Exploit
Fix
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Debian
Google Chrome
Red Os