PT-2024-6164
CVE-2024-7965
·
تاريخ النشر
2024-08-21
·
تاريخ التحديث
2025-09-29
الوصف من
CVSS 2.0
10
عاليةالمقاييسAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 128.0.6613.84
Description
The vulnerability is an inappropriate implementation bug in the V8 JavaScript and WebAssembly engine, which could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. This flaw has been described as a high-severity vulnerability and is being actively exploited in the wild. A proof of concept (PoC) exploit has been made available for this vulnerability. The vulnerability could enable remote attacks, and it is recommended to update Google Chrome to the latest version to protect against this vulnerability.
Recommendations
To resolve the issue, update Google Chrome to version 128.0.6613.84 or later. As a temporary workaround, consider disabling the V8 JavaScript engine or restricting access to it until a patch is available. However, the most effective solution is to update the browser to the latest version.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾