Out of bounds write in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | debian-upgrade-chromium | Jan 22, 2024 | Jan 16, 2024 | |
| Freebsd | freebsd-upgrade-package-electron26freebsd-upgrade-package-electron27freebsd-upgrade-package-chromiumfreebsd-upgrade-package-ungoogled-chromium | Jan 18, 2024 | Jan 17, 2024 | |
| Gentoo Linux | gentoo-linux-upgrade-dev-qt-qtwebenginegentoo-linux-upgrade-www-client-chromiumgentoo-linux-upgrade-www-client-google-chromegentoo-linux-upgrade-www-client-microsoft-edge | Feb 19, 2024 | Jan 16, 2024 | |
| Google Chrome | google-chrome-upgrade-latest | Jan 17, 2024 | Jan 17, 2024 | |
| Microsoft Edge | microsoft-edge-upgrade-latest | Jan 18, 2024 | Jan 17, 2024 | |
| Suse | — | suse-upgrade-chromedriversuse-upgrade-chromiumsuse-upgrade-opera | Jan 19, 2024 | Jan 16, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub