Security News > 2024 > August > Google Warns of CVE-2024-7965 Chrome Security Flaw Under Active Exploitation
2024-08-27 04:45
Google has revealed that a security flaw that was patched as part of a security update rolled out last week to its Chrome browser has come under active exploitation in the wild. Tracked as CVE-2024-7965, the vulnerability has been described as an inappropriate implementation bug in the V8 JavaScript and WebAssembly engine. "Inappropriate implementation in V8 in Google Chrome prior to
News URL
https://thehackernews.com/2024/08/google-warns-of-cve-2024-7965-chrome.html
Related news
- Google rolls back decision to kill third-party cookies in Chrome (source)
- Google's plan to drop third-party cookies in Chrome crumbles (source)
- Google Abandons Plan to Phase Out Third-Party Cookies in Chrome (source)
- Forget security – Google's reCAPTCHA v2 is exploiting users for profit (source)
- Google Chrome now warns about risky password-protected archives (source)
- Google Chrome now asks for passwords to scan protected archives (source)
- Oops. Apple relied on bad code while flaming Google Chrome's Topics ad tech (source)
- Google fixes Chrome Password Manager bug that hides credentials (source)
- Google apologizes for breaking password manager for millions of Windows users with iffy Chrome update (source)
- Google Chrome adds app-bound encryption to block infostealer malware (source)
Related Vulnerability
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-08-21 | CVE-2024-7965 | Out-of-bounds Write vulnerability in Google Chrome Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | 8.8 |