CVE-2024-12381: Type Confusion in V8

Reference Links

• https://chromereleases.googleblog.com/2024/12/stable-channel-update-for-desktop_10.html (Advisory)
• https://issues.chromium.org/issues/381696874
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-12381 (Advisory)

Parent vulnerabilities

(Appears in the following advisories)

• 575212924201092031

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2024-12382

Frequently Asked Questions

• What is the severity of CVE-2024-12381?

  CVE-2024-12381 has been rated as a high severity vulnerability due to the potential for type confusion, which can lead to exploitation in affected software.

• How do I fix CVE-2024-12381?

  To fix CVE-2024-12381, update Google Chrome to version 131.0.6778.139 or later, or ensure your Microsoft Edge is updated to the latest version.

• Which versions of Google Chrome are affected by CVE-2024-12381?

  Google Chrome versions prior to 131.0.6778.139 are affected by CVE-2024-12381.

• Is Microsoft Edge affected by CVE-2024-12381?

  Yes, Microsoft Edge (Chromium-based) is affected, and users must ensure they are on the latest security update.

• What type of vulnerability is CVE-2024-12381?

  CVE-2024-12381 is a type confusion vulnerability that can be exploited to execute arbitrary code.