Insufficient Data Validation in Dawn for Google Chrome on Android
CVE-2024-7256
Summary
A vulnerability exists in the Dawn component of Google Chrome on Android, where insufficient data validation could allow a remote attacker to execute arbitrary code. This vulnerability is particularly concerning as it can be exploited through a specially crafted HTML page. Users of the affected versions are advised to update to the latest version, 127.0.6533.88 or above, to mitigate this security risk. The issue exemplifies the need for robust data handling practices in web browsers to prevent unauthorized access and potential system compromise.
Affected Version(s)
Chrome 127.0.6533.88
News Articles
Google Chrome 127 Release Addressed Multiple Security Bugs
Google addressed one critical and two high-severity flaws with the Chrome 127 release for Desktop and Android and urged users to update.
5 months ago
Microsoft Edge Vulnerability Let Attackers Execute Arbitrary Code
Microsoft has released a critical security update for its Edge browser to address multiple vulnerabilities, including a severe validation flaw that could allow attackers to execute arbitrary code on affected systems.
5 months ago
References
CVSS V3.1
Timeline
- π°
First article discovered by CybersecurityNews
Vulnerability published