Remote Code Execution in Chrome's V8 Prior to 125.0.6422.112

CVE-2024-5274
8.8HIGH

Key Information

Vendor
Google
Status
Chrome
Vendor
CVE Published:
28 May 2024

Badges

🔥 No. 1 Trending😄 Trended👾 Exploit Exists📰 News Worthy

Summary

The vulnerability CVE-2024-5274 is a type confusion in Chrome's V8 JavaScript engine that allows for remote code execution. It is a high-severity flaw exploited in the wild, impacting millions of Chrome users globally. Google has patched this zero-day vulnerability, which is the fourth one this month and the eighth so far in 2024. It is important for users to update Chrome to version 125.0.6422.112 to mitigate potential threats. The frequency of these vulnerabilities suggests that attackers may be focusing on specific components of Chrome's architecture. Organizations and users are urged to update their browsers immediately to address this exploited vulnerability.

CISA Reported

CISA provides regional cyber and physical services to support security and resilience across the United States. CISA monitor the most dangerious vulnerabilities and have identifed CVE-2024-5274 as being exploited but is not known by the CISA to be used in ransomware campaigns. This is subject to change at pace

The CISA's recommendation is: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Affected Version(s)

Chrome < 125.0.6422.112

News Articles

favicon imageThe Hacker News

Russian Hackers Exploit Safari and Chrome Flaws in High-Profile Cyberattack

Russian hackers exploit patched Safari and Chrome flaws in attacks on Mongolian government websites, targeting mobile users.

3 months ago

favicon imageSC Media

Google patches fourth zero-day in May, eighth so far of 2024

Security pros say because this bug was exploited in the wild, assume threat actors have launched remote code execution attacks.

6 months ago

favicon imageSpiceworks

Google Releases Emergency Update for Latest Chrome Zero-Day - Spiceworks

Google fixes another critical security flaw in Chrome. Learn more about the fourth zero-day exploit patched this month and why updating your browser is essential.

6 months ago

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • 🔥

    Vulnerability reached the number 1 worldwide trending spot.

  • 👾

    Exploit exists.

  • Vulnerability started trending.

  • Vulnerability published.

  • First article discovered by SecurityWeek

  • Vulnerability Reserved.

Collectors

NVD DatabaseMitre DatabaseCISA DatabaseGoogle Feed10 News Article(s)
.