PT-2024-7627 · Google+5 · Google Chrome+5
Cassidy6564
·
Published
2024-10-29
·
Updated
2025-07-02
·
CVE-2024-10488
CVSS v2.0
10
High
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 130.0.6723.92
Microsoft Edge versions prior to the fixed version (affected versions not specified)
Description
The issue is related to a use-after-free vulnerability in the implementation of WebRTC technology in Google Chrome and Microsoft Edge browsers. This vulnerability can be exploited by a remote attacker using a specially crafted HTML page, potentially allowing them to impact the confidentiality, integrity, and availability of data. The vulnerability is associated with heap corruption.
Recommendations
For Google Chrome versions prior to 130.0.6723.92, update to version 130.0.6723.92 or later to resolve the issue.
For Microsoft Edge, apply the latest security update that fixes the WebRTC vulnerability.
As a temporary workaround, consider restricting access to WebRTC functionality until a patch is available.
Fix
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Debian
Google Chrome
Edge
Red Os