Lucene search

K
kasperskyKaspersky LabKLA68998
HistoryJun 18, 2024 - 12:00 a.m.

KLA68998 Multiple vulnerabilities in Google Chrome

2024-06-1800:00:00
Kaspersky Lab
threats.kaspersky.com
7
google chrome
vulnerabilities
arbitrary code execution
denial of service
dawn
webassembly
v8
cve-2024-6103
cve-2024-6101
cve-2024-6102
cve-2024-6100
update
ace
dos
affected products

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

9.6

Confidence

High

EPSS

0.001

Percentile

22.0%

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service.

Below is a complete list of vulnerabilities:

  1. Use after free vulnerability in Dawn can be exploited to cause denial of service or execute arbitrary code.
  2. Inappropriate implementation vulnerability in WebAssembly can be exploited to cause denial of service.
  3. Out of bounds memory access vulnerability in Dawn can be exploited to cause denial of service.
  4. Type confusion vulnerability in V8 can be exploited to cause denial of service.

Original advisories

Stable Channel Update for Desktop

Related products

Google-Chrome

CVE list

CVE-2024-6103 unknown

CVE-2024-6101 unknown

CVE-2024-6102 unknown

CVE-2024-6100 unknown

KB list

  • KB is Microsoft Knowledge Base article (In security case it corresponds Microsoft Security Advisory). KB is an atomic part of Microsoft security updates, which is detected by Microsoft Updater and can be installed or reverted. KB can contain not only programmatically updates and not only updates released by Microsoft.

Solution

Update to the latest version

Download Google Chrome

Affected Products

  • Google Chrome earlier thanΒ 126.0.6478.114

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

9.6

Confidence

High

EPSS

0.001

Percentile

22.0%