CVE-2024-4761—Google Chromium V8 Out-of-Bounds Memory Write Vulnerability

Vulnerability Name

Google Chromium V8 Out-of-Bounds Memory Write Vulnerability

Description

Google Chromium V8 Engine contains an unspecified out-of-bounds memory write vulnerability via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

Known To Be Used in Ransomware Campaigns?

Ransomware Status:

Unknown

Action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Additional Notes

• https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_13.html
• https://nvd.nist.gov/vuln/detail/CVE-2024-4761

Related News Articles

• Google Warns of CVE-2024-7965 Chrome Security Flaw Under Active ExploitationAugust 27, 2024
• Google tags a tenth Chrome zero-day as exploited this yearAugust 26, 2024
• Google fixes ninth Chrome zero-day tagged as exploited this yearAugust 21, 2024
• Google Fixes High-Severity Chrome Flaw Actively Exploited in the WildAugust 22, 2024
• Google fixes ninth Chrome zero-day exploited in attacks this yearAugust 21, 2024

Related Weaknesses

• CWE-787