CVE-2024-27934

CVSS 3.1 Score 8.4 of 10 (high)

Details

Published Mar 21, 2024
CWE ID 416

Summary

CVE-2024-27934 is a cyber vulnerability affecting Deno, a JavaScript, TypeScript, and WebAssembly runtime. The vulnerability exists in versions 1.36.2 to 1.40.3 and is caused by the use of inherently unsafe *const c_void and ExternalPointer, which can lead to use-after-free access of the underlying structure. This allows an attacker controlling the code executed inside a Deno runtime to achieve arbitrary code execution on the host machine, regardless of permissions. The issue has a base severity rating of HIGH and poses a potential danger to organizations as it can result in unauthorized code execution. The vulnerability is remediated in version 1.40.3 of Deno.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-27934 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options