CVE-2024-1284: 114 is being updated in the LTS (Long Term Support) channel, to version 1140.5735.358 (Platform Version: 15437.98.0) for most ChromeOS devices.
Chromium: CVE-2024-1284 Use after free in Mojo
Other sources
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
— Microsoft
Use after free in Mojo in Google Chrome prior to 121.0.6167.160 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
— MITRE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Google Chrome/Chromium-based browsersto a version that resolves this vulnerability.Fixed in 121.0.6167.160 - Upgrade
Upgrade
ChromeOS LTS (Long Term Support) channelto a version that resolves this vulnerability.Fixed in 1140.5735.358
Event History
Frequently Asked Questions
What is the severity of CVE-2024-1284?
CVE-2024-1284 is classified as a high-severity vulnerability due to its potential for exploitation.
How do I fix CVE-2024-1284?
To fix CVE-2024-1284, ensure that your browser is updated to the latest version, as this vulnerability has been addressed in recent updates.
What applications are affected by CVE-2024-1284?
CVE-2024-1284 affects Google Chrome and Microsoft Edge (Chromium-based) versions prior to the latest updates.
What type of vulnerability is CVE-2024-1284?
CVE-2024-1284 is classified as a use-after-free vulnerability, which can lead to memory corruption.
Is there a workaround for CVE-2024-1284?
There are no known workarounds for CVE-2024-1284, so applying the latest software updates is essential for protection.