CVE-2024-7968

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 128.0.6613.84

Description The issue is related to a use after free vulnerability in the Autofill function of Google Chrome and Microsoft Edge browsers. This vulnerability can be exploited by a remote attacker who convinces the user to engage in specific UI interactions, potentially allowing the execution of arbitrary code via a crafted HTML page. The exploitation may lead to heap corruption.

Recommendations For Google Chrome versions prior to 128.0.6613.84, update to version 128.0.6613.84 or later to resolve the issue. As a temporary workaround, consider avoiding the use of the Autofill function until the update is applied. Restrict access to crafted HTML pages to minimize the risk of exploitation.