mickmick.net

Google Chrome Remote Code Execution Vulnerability

Release Date: 21 Dec 2023

RISK: Extremely High Risk

TYPE: Clients - Browsers

A vulnerability has been identified in Google Chrome. A remote attacker could exploit this vulnerability to trigger remote code execution on the targeted system.

 

Note:

For CVE-2023-7024, heap buffer overflow in WebRTC. Google is aware that an exploit for CVE-2023-7024 exists in the wild.

---

Impact

• Remote Code Execution

---

System / Technologies affected

• Google Chrome prior to 120.0.6099.129 (Linux)
• Google Chrome prior to 120.0.6099.129 (Mac)
• Google Chrome prior to 120.0.6099.129/130 (Windows)

---

Solutions

Before installation of the software, please visit the software vendor web-site for more details.

Apply fixes issued by the vendor:

• Update to version 120.0.6099.129 (Linux) or later
• Update to version 120.0.6099.129 (Mac) or later
• Update to version 120.0.6099.129/130 (Windows) or later

---

Vulnerability Identifier

• CVE-2023-7024

---

Source

• Google Chrome

---

Related Link

• https://chromereleases.googleblog.com/2023/12/stable-channel-update-for-desktop_20.html