CVE-2024-4761

HIGHCISA KEV

Google Chromium V8 Out-of-Bounds Memory Write Vulnerability

Title source: CISA
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2024-4761 has a selected CVSS score of 8.8 (high); EIP currently links 1 repository PoC. CISA lists CVE-2024-4761 in KEV.

Description

Out of bounds write in V8 in Google Chrome prior to 124.0.6367.207 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High)

Description source: CVE List

Exploitation context

Known exploitation

CISA KEV
Listed · May 16, 2024 · CISA
VulnCheck KEV
Listed · May 9, 2024 · VulnCheck
Reported exploitation
Observed · VulnCheck

Available material

Repository PoCs
1

CISA SSVC decision

ExploitationActive
AutomatableNo
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated May 20, 2024 · Source: CVE List

Affected products and versions

2
ProductSourceVersion range

Chrome

Browse Google / Chrome
CVE List124.0.6367.207 to < 124.0.6367.207affected

Chromium V8

Browse Google / Chromium V8
CISAVersion data not supplied

Proofs of concept

1

Repository PoCs

GitHubmichredteam/CVE-2024-4761Repository PoCby michredteam4Not analyzed3 files

2.6 KiB

GitHub
PoC details

References

7