CVE-2024-9123: High Integer overflow in Skia365802567 High CVE-2024-9122 Type Confusion in V8359949835 High CVE-2024-8905 Inappropriate implementation in V8

Reference Links

• https://chromereleases.googleblog.com/2024/09/stable-channel-update-for-desktop_24.html
• https://issues.chromium.org/issues/365884464
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-9123 (Advisory)
• https://chromereleases.googleblog.com/2024/10/long-term-support-channel-update-for.html (Advisory)

Parent vulnerabilities

(Appears in the following advisories)

• 7787548439845889298

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2024-9122
• CVE-2024-8905

Frequently Asked Questions

• What is the severity of CVE-2024-9123?

  CVE-2024-9123 has been classified with a high severity level due to the potential for exploitation through integer overflow.

• How do I fix CVE-2024-9123?

  To mitigate CVE-2024-9123, ensure you update Microsoft Edge or Google Chrome to the latest versions that address this vulnerability.

• Which versions are affected by CVE-2024-9123?

  CVE-2024-9123 affects Microsoft Edge versions prior to 129.0.2792.65 and Google Chrome versions prior to 129.0.6668.70.

• Is CVE-2024-9123 relevant for Edge (Chromium-based) users?

  Yes, CVE-2024-9123 is particularly relevant for users of Edge (Chromium-based) as it incorporates code from Chromium.

• What are the potential impacts of CVE-2024-9123?

  Exploitation of CVE-2024-9123 could lead to application crashes or arbitrary code execution, posing security risks to users.