Type Confusion in V8 Could Lead to Heap Corruption

CVE-2024-1939
Currently unrated 🤨

Key Information

Vendor
Google
Status
Chrome
Vendor
CVE Published:
29 February 2024

Badges

👾 Exploit Exists🔴 Public PoC

Summary

Type Confusion in V8 in Google Chrome prior to 122.0.6261.94 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Affected Version(s)

Chrome < 122.0.6261.94

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

Timeline

  • 👾

    Exploit exists.

  • Vulnerability published.

Collectors

NVD DatabaseMitre DatabaseGoogle Feed1 Proof of Concept(s)
.