2024-012: Vulnerability in Chrome

2024-012: Vulnerability in Chrome ↗ source

January 19, 2024 CERT-EU Advisory

Source: https://cert.europa.eu/publications/security-advisories/2024-012/

Summary

On January 16, 2024, Google has released an advisory addressing a zero-day vulnerability identified as CVE-2024-0519 , which affects the V8 engine in Google Chromium. This vulnerability allows for out-of-bounds memory access, potentially leading to heap corruption through a crafted HTML page. It has been reported that this vulnerability is being actively exploited. CVE-2024-0519 is a critical vulnerability in the V8 JavaScript and WebAssembly engine used by Chromium-based browsers. It allows remote attackers to potentially exploit heap corruption via a crafted HTML page, leading to out-of-bounds memory access. and 120.0.6099.224/225 for Windows are impacted; It is recommended updating the Google Chrome browser to the latest version as it includes patches for CVE-2024-0519 and other vulnerabilities. It is recommended to enable automatic updates for Chrome to ensure timely application of security patches.

News Coverage

No coverage found in monitored research blogs or news feeds.

CVEs Referenced in This Publication

CVE	CVSS	Affected
CVE-2024-0519	8.8 High	Google Chromium V8 Google Chromium V8 Engine contains an out-of-bounds memory access vulnerability that allows a remote attacker to potentially exploit heap corruption …

Extracted from the publication text. Each CVE links to its tracked detail page.

Vendors Named in This Publication

Microsoft 388 KEV Google 75 KEV

Each vendor links to its Known Exploited Vulnerabilities catalog page. Only vendors that appear in the KEV catalog are listed, either because the publication cites one of their KEV entries or because it names them directly.