First published: Mon May 13 2024(Updated: )
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2024">Google Chrome Releases</a> for more information.</p> <p>Google is aware that an exploit for CVE-2024-4947 exists in the wild.</p>
Credit: Vasily Berdnikov @vaber_b KasperskyBoris Larin @oct0xor Kaspersky chrome-cve-admin@google.com
Affected Software | Affected Version | How to fix |
---|---|---|
Google Chrome | <125.0.6422.60 | 125.0.6422.60 |
Microsoft Edge (Chromium-based) | ||
Google Chromium V8 | ||
Google Chrome | <125.0.6422.60 | |
Fedoraproject Fedora | =38 | |
Fedoraproject Fedora | =39 | |
Fedoraproject Fedora | =40 | |
Fedora | =38 | |
Fedora | =39 | |
Fedora | =40 |
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)
CVE-2024-4947 has been classified as a high severity vulnerability due to the potential for exploitation.
To fix CVE-2024-4947, ensure that you update Google Chrome to version 125.0.6422.60 or later.
CVE-2024-4947 affects Google Chrome versions prior to 125.0.6422.60, as well as Microsoft Edge (Chromium-based) and various versions of Fedora.
Yes, Google is aware that an exploit for CVE-2024-4947 is in the wild, making it critical to apply patches quickly.
The potential impacts of CVE-2024-4947 include unauthorized access or control over affected systems, leading to data breaches.