Lucene search

K
kasperskyKaspersky LabKLA63109
HistoryJan 16, 2024 - 12:00 a.m.

KLA63109 Multiple vulnerabilities in Google Chrome

2024-01-1600:00:00
Kaspersky Lab
threats.kaspersky.com
18
google chrome
multiple vulnerabilities
high severity
dos attacks
update
cve-2024-0517
cve-2024-0518
cve-2024-0519

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

9.1

Confidence

High

EPSS

0.002

Percentile

58.9%

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service.

Below is a complete list of vulnerabilities:

  1. Type confusion vulnerability in V8 can be exploited to cause denial of service.
  2. Out of bounds memory access vulnerability in V8 can be exploited to cause denial of service.
  3. Out of bounds write vulnerability in V8 can be exploited to cause denial of service.

Original advisories

Chrome Releases: Stable Channel Update for Desktop

Exploitation

Public exploits exist for this vulnerability.

Related products

Google-Chrome

CVE list

CVE-2024-0517 critical

CVE-2024-0518 critical

CVE-2024-0519 critical

Solution

Update to the latest version

Download Google Chrome

Impacts

  • DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

Affected Products

  • Google Chrome earlier than 120.0.6099.224

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

9.1

Confidence

High

EPSS

0.002

Percentile

58.9%