Heap Corruption Vulnerability in ANGLE Prior to 123.0.6312.86 Allows Remote Attack

CVE-2024-2883

Currently unrated 🤨

Key Information

Vendor: Google
Status: Chrome
Vendor: CVE Published:; 26 March 2024

Badges

👾 Exploit Exists📰 News Worthy

Summary

The reported CVE-2024-2883 is a critical flaw in Google Chrome prior to version 123.0.6312.86, allowing potential exploitation of heap corruption through a crafted HTML page. This vulnerability could lead to remote attacks, with the severity rated as critical by Chromium security. The update to Chrome version 123.0.6312.86/.87 addresses a total of seven security vulnerabilities, including four rated as “High” and one “Critical” flaw. The critical vulnerability was discovered by Cassidy Kim and earned them a $10,000 reward from Google. The update highlights the importance of timely patching and the role of security researchers in keeping users safe. This flaw has not been exploited by ransomware groups.