Google Chrome fixes a high-severity vulnerability

Do you think this report is well-written? *

Yes

Do you use this technology? *

Yes

Was this report useful to you?

Yes

We would be happy if you would describe:

The security services provided by CESNET are designed to provide significant support in ensuring the cybersecurity of connected organizations. Although we strive to provide quality and reliable services, it is not possible to guarantee absolute coverage of all security vulnerabilities. Our services should be seen as a complement to an organization's own security management, not as a replacement. The client bears ultimate responsibility for securing their environment.

This report was translated by AI; nobody has reviewed the translation yet. Original language: Czech.

[TLP:CLEAR] Google Chrome fixes a high-severity vulnerability

Google is fixing a high-severity vulnerability in Google Chrome and in Chromium-based web browsers. Google fixed the vulnerability for Chrome on Linux in version 131.0.6778.108 and for Chrome on Windows/Mac in version 131.0.6778.108/.109 [1]. Among operating systems, Debian provided a fix for the bookworm (security) release in version 131.0.6778.139-1~deb12u1 and for trixie and sid in version 131.0.6778.139-1 [2]. Ubuntu releases are not affected [3].

Google Chrome - information disclosure, RCE, DoS (CVE-2024-12053)

CVSS 8.8 (High)

Allows an unauthenticated remote attacker, using social engineering techniques, to access memory out of bounds, which may lead to disclosure of potentially sensitive data, code execution or a DoS attack [1].

CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

More information:

CVE-2024-12053 at cve.org, NVD
CWE-843: Access of Resource Using Incompatible Type ('Type Confusion') at cwe.mitre.org

The vulnerability was publicly disclosed 3. 12. 2024.

Links

By CESNET, z.s.p.o. Michaela Ručková on 11. 12. 2024.

Report feedback

[TLP:CLEAR] Google Chrome fixes a high-severity vulnerability

Google Chrome - information disclosure, RCE, DoS (CVE-2024-12053)

CVSS 8.8 (High)

Links