PT-2024-4025
CVE-2024-5274
·
تاريخ النشر
2023-09-18
·
تاريخ التحديث
2026-10-31
الوصف من
CVSS 3.1
9.6
حرجةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 125.0.6422.112
Description
A type confusion issue exists in the V8 JavaScript engine. This flaw allows a remote attacker to execute arbitrary code within a sandbox by inducing the user to visit a specially crafted HTML page. Type confusion occurs when a program accesses a resource using a different type than the one it was originally created with, leading to memory corruption or unexpected behavior. There are reports of this issue being exploited in the wild.
Recommendations
Update to version 125.0.6422.112 or later.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾