Google Chrome Zero-Day Remote Code Execution Vulnerability (CVE-2024-7965)

A zero-day remote code execution vulnerability (CVE-2024-7965) was identified recently and impacting Google Chrome versions prior to 128.0.6613.84.  It allows a remote attacker to exploit heap corruption through specially crafted HTML pages and achieve remote code execution.  The vulnerability is actively exploited in the wild, users are urged to update the Google Chrome to the latest version immediately to mitigate any potential threats.

Vulnerability

• Remote Code Execution Vulnerability (CVE-2024-7965)

Severity Level

• High

Affected versions

• Google Chrome version before 128.0.6613.84

Remediation

• Update the Google Chrome to the latest version IMMEDIATELY.

Reference

• NVD – CVE-2024-7965 (nist.gov)
• Chrome Releases: Stable Channel Update for Desktop (googleblog.com)
• CVE-2024-7965 – Security Update Guide – Microsoft – Chromium: CVE-2024-7965 Inappropriate implementation in V8

Enquiry

• ITSC Service Desk: http://servicedesk.itsc.cuhk.edu.hk

Published on: 26 Sep 2024