CVE-2024-12693: Out of bounds memory access in V8

Reference Links

• https://chromereleases.googleblog.com/2024/12/stable-channel-update-for-desktop_18.html (Advisory)
• https://issues.chromium.org/issues/382190919
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-12693 (Advisory)

Parent vulnerabilities

(Appears in the following advisories)

• 1113277486970797190

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2024-12692
• CVE-2024-12694
• CVE-2024-12695

Frequently Asked Questions

• What is the severity of CVE-2024-12693?

  CVE-2024-12693 has been rated with a high severity level due to its potential for exploitation.

• How do I fix CVE-2024-12693?

  To fix CVE-2024-12693, ensure you update Google Chrome to version 131.0.6778.204 or later, or Microsoft Edge to version 131.0.2903.112 or later.

• Which versions of Chrome are affected by CVE-2024-12693?

  CVE-2024-12693 affects all versions of Google Chrome prior to 131.0.6778.204.

• Which versions of Microsoft Edge are impacted by CVE-2024-12693?

  CVE-2024-12693 impacts Microsoft Edge (Chromium-based) versions before 131.0.2903.112.

• Is CVE-2024-12693 a critical vulnerability that requires immediate attention?

  Yes, CVE-2024-12693 is considered critical and should be addressed as soon as possible to mitigate potential attacks.