Log in Start free

Vulnerability · Published Mar 20, 2024 · Assigned by Chrome

CVE-2024-2625

High 8.8

In plain English

A high-severity security flaw in Chrome from Google. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 21.4% (higher than 98% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)8.8High
Exploit odds (30 days)21.4%top 2.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known

Official description

Object lifecycle issue in V8 in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chromium security severity: High)

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Alpine:v3.20qt6-qtwebengine6.6.3-r2ALPINE-CVE-2024-2625
Alpine:v3.21qt6-qtwebengine6.6.3-r2ALPINE-CVE-2024-2625
Alpine:v3.22qt6-qtwebengine6.6.3-r2ALPINE-CVE-2024-2625
Alpine:v3.23qt6-qtwebengine6.6.3-r2ALPINE-CVE-2024-2625
Alpine:v3.24qt6-qtwebengine6.6.3-r2ALPINE-CVE-2024-2625
Debian:12chromium123.0.6312.86-1~deb12u1DEBIAN-CVE-2024-2625
Debian:12chromium123.0.6312.86-1~deb12u1DSA-5648-1
Debian:13chromium123.0.6312.58-1DEBIAN-CVE-2024-2625
Debian:14chromium123.0.6312.58-1DEBIAN-CVE-2024-2625

Affected products (as reported)

VendorProductVersions
Google Chrome 123.0.6312.58 – before 123.0.6312.58

References