PT-2024-6164
CVE-2024-7965
·
Published
2024-08-21
·
Updated
2025-09-29
Description by
CVSS 2.0
10
HighMetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 128.0.6613.84
Description
The vulnerability is an inappropriate implementation bug in the V8 JavaScript and WebAssembly engine, which could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. This flaw has been described as a high-severity vulnerability and is being actively exploited in the wild. A proof of concept (PoC) exploit has been made available for this vulnerability. The vulnerability could enable remote attacks, and it is recommended to update Google Chrome to the latest version to protect against this vulnerability.
Recommendations
To resolve the issue, update Google Chrome to version 128.0.6613.84 or later. As a temporary workaround, consider disabling the V8 JavaScript engine or restricting access to it until a patch is available. However, the most effective solution is to update the browser to the latest version.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾