PT-2024-6164

CVE-2024-7965

·

تاريخ النشر

2024-08-21

·

تاريخ التحديث

2025-09-29

الوصف من

CVSS 2.0
10
عالية
المقاييسAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 128.0.6613.84
Description The vulnerability is an inappropriate implementation bug in the V8 JavaScript and WebAssembly engine, which could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. This flaw has been described as a high-severity vulnerability and is being actively exploited in the wild. A proof of concept (PoC) exploit has been made available for this vulnerability. The vulnerability could enable remote attacks, and it is recommended to update Google Chrome to the latest version to protect against this vulnerability.
Recommendations To resolve the issue, update Google Chrome to version 128.0.6613.84 or later. As a temporary workaround, consider disabling the V8 JavaScript engine or restricting access to it until a patch is available. However, the most effective solution is to update the browser to the latest version.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
ALSA-2025_16880
ALSA-2025_2863
ALSA-2025_2864
ALT-PU-2024-14994
ALT-PU-2024-14996
ALT-PU-2024-15041
ALT-PU-2024-15575
ALT-PU-2024-17740
ALT-PU-2025-2945
ALT-PU-2025-4366
ALT-PU-2025-7539
ALT-PU-2025-8547
DSA-5757-1
MGASA-2024-0321
OPENSUSE-SU-2024:0258-1
OPENSUSE-SU-2024:0258-2
OPENSUSE-SU-2024:14285-1
OPENSUSE-SU-2024:14425-1
OPENSUSE-SU-2024:14548-1
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾