CVE-2024-2173
CVSS 3.1 Score 5.3 of 10 (medium)
Details
Published Mar 6, 2024
Updated: Dec 19, 2024
CWE ID 209
Summary
CVE-2024-2173 is a high-severity vulnerability affecting Google Chrome versions prior to 122.0.6261.111. This issue involves an out-of-bounds memory access in V8, the JavaScript engine used by Chrome. A remote attacker can exploit this flaw by creating a specifically crafted HTML page, allowing them to perform out-of-bounds memory access and potentially execute arbitrary code. This vulnerability poses a significant risk to users and requires immediate attention to apply the available patch.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Apache Tomcat
Affected Vendors
- Apache Corporation