PT-2024-7276

CVE-2024-10230

·

تاريخ النشر

2024-10-05

·

تاريخ التحديث

2025-03-19

الوصف من

CVSS 2.0
10
عالية
المقاييسAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 130.0.6723.69
Description: The issue is related to a type confusion error in the V8 JavaScript engine used by Google Chrome and Microsoft Edge, allowing a remote attacker to potentially exploit heap corruption via a crafted HTML page. This could impact the confidentiality, integrity, and availability of protected information. The severity of this issue is rated as High by Chromium.
Recommendations: For Google Chrome versions prior to 130.0.6723.69, update to version 130.0.6723.69 or later to resolve the issue. As a temporary workaround, consider restricting access to potentially vulnerable HTML pages until the update is applied.
قابلية الاستغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
ALT-PU-2024-17740
ALT-PU-2025-4366
DSA-5799-1
OPENSUSE-SU-2024:0341-1
OPENSUSE-SU-2024:14441-1
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾