Google Chrome Multiple Vulnerabilities
RISK: Extremely High Risk
TYPE: Clients - Browsers
Multiple vulnerabilities were identified in Google Chrome. A remote attacker could exploit some of these vulnerabilities to trigger spoofing, remote code execution and denial of service condition on the targeted system.
Notes:
CVE-2024-4947 is being exploited in the wild. CVE-2024-4947 is casued by a type confusion weakness in the Chrome V8 JavaScript engine and can lead to remote code execution on targeted device.
Impact
- Remote Code Execution
- Spoofing
- Denial of Service
System / Technologies affected
- Google Chrome prior to 124.0.6422.60 (Linux)
- Google Chrome prior to 125.0.6422.60/.61 (Mac)
- Google Chrome prior to 125.0.6422.60/.61 (Windows)
Solutions
Before installation of the software, please visit the software vendor web-site for more details.
Apply fixes issued by the vendor:
- Update to version 124.0.6422.60 (Linux) or later
- Update to version 125.0.6422.60/.61 (Mac) or later
- Update to version 125.0.6422.60/.61 (Windows) or later
Vulnerability Identifier
Source
Related Link
Share with