IP-DB.com
Türkçe English Deutsch Español
Anmelden API-Schlüssel holen
8.8Hoch KEV

CVE-2024-0519Google Chromium V8 Out-of-Bounds Memory Access Vulnerability

Google Chrome; google chrome Veröffentlicht: (vor 2 Jahren)

Bekannt ausgenutzt — Google Chromium V8 Out-of-Bounds Memory Access Vulnerability

CISA hat am 17.01.2024 bestätigt, dass diese Schwachstelle in echten Angriffen genutzt wird. Frist für US-Bundesbehörden: 07.02.2024.

Erforderliche Maßnahme: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop_16.html; https://nvd.nist.gov/vuln/detail/CVE-2024-0519

Beschreibung

Out of bounds memory access in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Schwachstellentyp (CWE): CWE-125CWE-787

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
couchbase couchbase server < 7.2.5
fedoraproject fedora 38
Google Chrome 120.0.6099.224 – < 120.0.6099.224

Referenzen und Patches

CPE-Treffer (NVD) (4)
  • cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* < 120.0.6099.224
  • cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*
  • cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*
  • cpe:2.3:a:couchbase:couchbase_server:*:*:*:*:*:*:*:* < 7.2.5

Neue CVEs im selben Produkt — Google Chrome

8.8Hoch
CVE-2026-126860
Google Chrome

Incorrect authorization in FileSystem in Google Chrome prior to 157.0.8103.78 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

8.8Hoch
CVE-2026-126890
Google Chrome

Out of bounds read in Media in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

8.8Hoch
CVE-2026-126899
Google Chrome

Use after free in Elements in Google Chrome prior to 157.0.8103.78 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

4.3Mittel
CVE-2026-126920
Google Chrome

Information leak in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)

3.1Niedrig
CVE-2026-126841
Google Chrome

Out of bounds read in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)

8.8Hoch
CVE-2026-126868
Google Chrome

Type confusion in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)