Skip to main content

Google Chrome Remote Code Execution Vulnerability

Release Date: 17 May 2024 5320 Views

RISK: Extremely High Risk

TYPE: Clients - Browsers

TYPE: Browsers

A vulnerability was identified in Google Chrome. A remote attacker could exploit this vulnerability to trigger remote code execution and denial of service on the targeted system.

 

Note:

Google is aware of reports that an exploit for CVE-2024-4761 exists in the wild. CVE-2024-4761 is an out-of-bounds write vulnerability impacting the V8 Javascript and WebAssembly engine leading to crash condition or arbitrary code execution on compromised hosts. 


Impact

  • Remote Code Execution
  • Denial of Service

System / Technologies affected

  • Google Chrome prior to 124.0.6367.207 (Linux)
  • Google Chrome prior to 124.0.6367.207/.208 (Mac)
  • Google Chrome prior to 124.0.6367.207/.208 (Windows)

Solutions

Before installation of the software, please visit the software vendor web-site for more details.

Apply fixes issued by the vendor:

  • Update to version 124.0.6367.207 (Linux) or later
  • Update to version 124.0.6367.207/.208 (Mac) or later
  • Update to version 124.0.6367.207/.208 (Windows) or later

Vulnerability Identifier


Source


Related Link