IP-DB.com
Türkçe English Deutsch Español
Giriş API Anahtarı Al
8.3Yüksek KEV

CVE-2024-4761Google Chromium V8 Out-of-Bounds Memory Write Vulnerability

Google Chrome Yayım: (2 yıl önce)

Aktif olarak istismar ediliyor — Google Chromium V8 Out-of-Bounds Memory Write Vulnerability

CISA bu açığın gerçek saldırılarda kullanıldığını 16.05.2024 tarihinde doğruladı. ABD federal kurumları için düzeltme son tarihi: 06.06.2024.

Gerekli işlem: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_13.html; https://nvd.nist.gov/vuln/detail/CVE-2024-4761

Açıklama

Out of bounds write in V8 in Google Chrome prior to 124.0.6367.207 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High)

Zayıflık türü (CWE): CWE-787

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
fedoraproject fedora 38
Google Chrome 124.0.6367.207 – < 124.0.6367.207

Kaynaklar ve yamalar

CPE eşleşmeleri (NVD) (4)
  • cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* < 124.0.6367.207
  • cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*
  • cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*
  • cpe:2.3:o:fedoraproject:fedora:40:*:*:*:*:*:*:*

Aynı üründe son açıklar — Google Chrome

Puansız
CVE-2026-121141
Google Chrome

Improper input validation in Editing in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)

Puansız
CVE-2026-121195
Google Chrome

Incorrect authorization in TrustedTypes in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)

Puansız
CVE-2026-121064
Google Chrome

Improper input validation in Performance in Google Chrome prior to 157.0.8103.38 allowed a local attacker to potentially execute arbitrary code inside the sandbox via a local program. (Chromium security severity: Low)

Puansız
CVE-2026-121069
Google Chrome

Use after free in Track in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)

Puansız
CVE-2026-121142
Google Chrome

Incorrect authorization in Network in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. (Chromium security severity: Low)

Puansız
CVE-2026-121169
Google Chrome

Missing authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. (Chromium security severity: Low)