Google Chrome Remote Code Execution Vulnerability
Release Date: 17 May 2024
RISK: Extremely High Risk
TYPE: Clients - Browsers
A vulnerability was identified in Google Chrome. A remote attacker could exploit this vulnerability to trigger remote code execution and denial of service on the targeted system.
Note:
Google is aware of reports that an exploit for CVE-2024-4761 exists in the wild. CVE-2024-4761 is an out-of-bounds write vulnerability impacting the V8 Javascript and WebAssembly engine leading to crash condition or arbitrary code execution on compromised hosts.
Impact
- Remote Code Execution
- Denial of Service
System / Technologies affected
- Google Chrome prior to 124.0.6367.207 (Linux)
- Google Chrome prior to 124.0.6367.207/.208 (Mac)
- Google Chrome prior to 124.0.6367.207/.208 (Windows)
Solutions
Before installation of the software, please visit the software vendor web-site for more details.
Apply fixes issued by the vendor:
- Update to version 124.0.6367.207 (Linux) or later
- Update to version 124.0.6367.207/.208 (Mac) or later
- Update to version 124.0.6367.207/.208 (Windows) or later
沒有留言:
發佈留言