CVE-2024-2627
CVSS 3.1 Score 8.8 of 10 (high)
Details
Published Mar 20, 2024
Updated: Aug 8, 2024
CWE ID 416
Summary
CVE-2024-2627 is a medium severity vulnerability affecting Google Chrome versions prior to 123.0.6312.58. This issue involves a use-after-free flaw in the Canvas component, which can be exploited by a remote attacker through a specially crafted HTML page. The result is potential heap corruption, allowing the attacker to gain unintended control over the affected system. Users are urged to update to the latest Chrome version to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share