CVE-2024-4761: Chrome Browser Security Fixes339458194 High Out of bounds write in V8340221135 High CVE-2024-4947 Type Confusion in V8
Chromium: CVE-2024-4761 Out of bounds write in V8
Other sources
Google Chromium V8 Engine contains an unspecified out-of-bounds memory write vulnerability via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
— CISA
Out of bounds write in V8 in Google Chrome prior to 124.0.6367.207 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High)
— NVD
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. Google is aware that an exploit for CVE-2024-4761 exists in the wild.
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Google Chrometo a version that resolves this vulnerability.Fixed in 124.0.6367.207 - Upgrade
Upgrade
Microsoft Edge (Chromium-based)to a version that resolves this vulnerability.Fixed in 124.0.6367.207
Event History
Frequently Asked Questions
What is the severity of CVE-2024-4761?
CVE-2024-4761 is considered a high-severity vulnerability due to its potential for exploitation in the wild.
How do I fix CVE-2024-4761?
To fix CVE-2024-4761, users should update their Chrome or Microsoft Edge browsers to the latest version as recommended by the vendor.
Which software versions are affected by CVE-2024-4761?
CVE-2024-4761 affects multiple versions of Google Chrome before 124.0.6367.207 and Microsoft Edge based on Chromium.
Is there an exploit available for CVE-2024-4761?
Yes, Google has reported that there is an active exploit for CVE-2024-4761.
What products are impacted by CVE-2024-4761?
Impacted products include Google Chrome, Microsoft Edge (Chromium-based), and Fedora versions 38, 39, and 40.