Type Confusion Vulnerability in Chrome Prior to 128.0.6613.137
CVE-2024-8638

8.8HIGH

Key Information:

Vendor

Google
Status
Chrome
Vendor
CVE Published:
11 September 2024

What is CVE-2024-8638?

A type confusion vulnerability exists in the V8 JavaScript engine used by Google Chrome. This flaw can be exploited by remote attackers through the delivery of specially crafted HTML content. When the browser processes this manipulated content, it may lead to object corruption, which can enable attackers to execute arbitrary code in the context of the user browsing the internet. Users are advised to update to the latest version of Google Chrome to mitigate any risks associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Chrome 128.0.6613.137

References

https://chromereleases.googleblog.com/2024/09/stable-chan...
https://issues.chromium.org/issues/362539773

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.