CVE-2024-4761: high-severity vulnerability in Google Chrome
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Prioritize patching. It under exploitation confirmed by CISA and has a public proof of concept.
Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
A flaw in Google Chrome's V8 engine allows attackers to write data outside intended memory boundaries through a malicious webpage, potentially enabling code execution or system compromise.
Out-of-bounds write vulnerability in V8 (CWE-787) exploitable via crafted HTML; requires user to visit a malicious page; can lead to arbitrary code execution with renderer process privileges. Affects Chrome versions prior to 124.0.6367.207.
The full analysis of this CVE is available in Portuguese →
In the same product, most dangerous first.