Google fixes actively exploited Chrome zero-day (CVE-2024-0519)
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2024-0517+1 related CVE | Out of bounds write in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page | 8.8 | 22% | ||
| CVE-2024-0519 | Out-of-Bounds Memory Access in Google Chrome/Chromium V8 (Actively Exploited) | 8.8 | 4% | KEV | KEV |
From the original article
1 min read at helpnetsecurity.com
In the new stable release of the Chrome browser, Google has fixed three security vulnerabilities affecting the V8 engine, including one zero-day (CVE-2024-0519) with an existing exploit. V8 is an open-source JavaScript and WebAssembly engine developed by the Chromium Project for Chromium and Google Chrome web browsers.
By @zeljkazorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.