Lucene search

K
kasperskyKaspersky LabKLA71896
HistoryAug 28, 2024 - 12:00 a.m.

KLA71896 Multiple vulnerability in Google Chrome

2024-08-2800:00:00
Kaspersky Lab
threats.kaspersky.com
13
google chrome
vulnerability
type confusion
v8
heap buffer overflow
denial of service
cve-2024-7969
cve-2024-8194
cve-2024-8198
cve-2024-8193
update
dos

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.5

Confidence

High

EPSS

0.001

Percentile

26.9%

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service.

Below is a complete list of vulnerabilities:

  1. Type confusion vulnerability in V8 can be exploited to cause denial of service.
  2. Heap buffer overflow vulnerability in Skia can be exploited to cause denial of service.

Original advisories

Stable Channel Update for Desktop

Related products

Google-Chrome

CVE list

CVE-2024-7969 warning

CVE-2024-8194 unknown

CVE-2024-8198 unknown

CVE-2024-8193 unknown

Solution

Update to the latest version

Download Google Chrome

Impacts

  • DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

Affected Products

  • Google Chrome earlier than 128.0.6613.113

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.5

Confidence

High

EPSS

0.001

Percentile

26.9%