2022年4月19日星期二

Google Chrome Remote Code Execution Vulnerability

Release Date: 19 Apr 2022

RISK: Extremely High Risk

TYPE: Clients - Browsers

TYPE: Browsers

A vulnerability was identified in Google Chrome. A remote user can exploit this vulnerability to trigger remote code execution on the targeted system.

 

Note:
CVE-2022-1364 is being exploited in the wild.

The vulnerability is related to the V8 JavaScript engine to process JavaScript code. The vulnerability can exploit the V8 engine to treat a JS object as an JS array and run arbitrary code on the targeted system.


Impact

  • Remote Code Execution

System / Technologies affected

  • Google Chrome prior to 100.0.4896.127

Solutions

Before installation of the software, please visit the software vendor web-site for more details.

Apply fixes issued by the vendor:

  • Update to version 100.0.4896.127

Vulnerability Identifier


Source


Related Link

沒有留言:

發佈留言

Android 多個漏洞

Android 多個漏洞 發佈日期: 2025年05月07日 風險: 高度風險 類型: 操作系統 - 流動裝置及操作系統 於 Android 發...