PT-2024-7276

CVE-2024-10230

·

Published

2024-10-05

·

Updated

2025-03-19

Description by

CVSS 2.0
10
High
MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 130.0.6723.69
Description: The issue is related to a type confusion error in the V8 JavaScript engine used by Google Chrome and Microsoft Edge, allowing a remote attacker to potentially exploit heap corruption via a crafted HTML page. This could impact the confidentiality, integrity, and availability of protected information. The severity of this issue is rated as High by Chromium.
Recommendations: For Google Chrome versions prior to 130.0.6723.69, update to version 130.0.6723.69 or later to resolve the issue. As a temporary workaround, consider restricting access to potentially vulnerable HTML pages until the update is applied.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
ALT-PU-2024-17740
ALT-PU-2025-4366
DSA-5799-1
OPENSUSE-SU-2024:0341-1
OPENSUSE-SU-2024:14441-1
Found an issue in the description? Have something to add? Feel free to write us 👾