CVE-2024-0517

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 120.0.6099.224 Microsoft Edge (affected versions not specified)

Description An out-of-bounds write exists in the V8 JavaScript engine, which is the component responsible for executing JavaScript code. This flaw allows a remote attacker to potentially exploit heap corruption—a condition where memory allocation in the heap is corrupted—via a specially crafted HTML page. Successful exploitation could lead to arbitrary code execution, bypassing the Chrome sandbox, or causing a denial of service. Real-world incidents have been reported where this issue was exploited in the wild.

Recommendations Update Google Chrome to version 120.0.6099.224 or later. At the moment, there is no information about a newer version that contains a fix for this vulnerability for Microsoft Edge.