CVE-2024-5274
CRITICAL KEVGoogle Chrome < 125.0.6422.112 - Remote Code Execution via V8 Type Confusion
Title source: llmExploitation Summary
CVE-2024-5274 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added May 28, 2024. EIP tracks 2 public exploits from researchers including mistymntncop, Alchemist3dot14.
AI-analyzed exploit summary This is a working exploit PoC for CVE-2024-5274, targeting a V8 JavaScript engine vulnerability involving a bytecode mismatch and out-of-bounds (OOB) read/write primitives. The exploit leverages a contradiction in variable state flags to achieve arbitrary memory manipulation.
Description
Type Confusion in V8 in Google Chrome prior to 125.0.6422.112 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
Exploits (2)
This is a working exploit PoC for CVE-2024-5274, targeting a V8 JavaScript engine vulnerability involving a bytecode mismatch and out-of-bounds (OOB) read/write primitives. The exploit leverages a contradiction in variable state flags to achieve arbitrary memory manipulation.
This repository contains a Python script to detect and initiate updates for Google Chrome to mitigate CVE-2024-5274. It checks the current Chrome version and prompts an update if the version is outdated.
References (5)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H