VDB
CVE-2024-8198
CVE-2024-8198
PUBLISHED
Es bestehen mehrere Schwachstellen in Google Chrome. Diese betreffen die Komponenten V8 und SKIA aufgrund von Heap- Buffer Overflows und Typkonfusion. Sie ermöglichen eine Heap Corruption über eine bösartige HTML-Seite. Ein entfernter, anonymer Angreifer kann diese Schwachstellen zur Ausführung von beliebigem Code ausnutzen. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion.
EPSS 0.30% · 53.3th percentile
Risk Scores
EPSS Score
0.30%
53.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Microsoft Edge <128.0.2739.42 | |
| Google Chrome Windows <128.0.6613.113/.114 | ||
| SUSE | SUSE openSUSE | |
| Debian | Debian Linux | |
| Google Chrome Linux <1128.0.6613.113 | ||
| Google Chrome Mac <128.0.6613.113/.114 |
Exploit Intelligence
- PoC for a Chrome integer overflow -> OOB write vulnerability I reported to Google in Skia. (github-poc-repo)
- PoC for a Chrome integer overflow -> OOB write vulnerability I reported to Google in Skia. (github-poc-repo)
- PoC for a Chrome integer overflow -> OOB write vulnerability I reported to Google in Skia. (github-poc-repo)
- PoC for a Chrome integer overflow -> OOB write vulnerability I reported to Google in Skia. (github-poc-repo)
- PoC for a Chrome integer overflow -> OOB write vulnerability I reported to Google in Skia. (github-poc-repo)
- PoC for a Chrome integer overflow -> OOB write vulnerability I reported to Google in Skia. (github-poc-repo)
- PoC for a Chrome integer overflow -> OOB write vulnerability I reported to Google in Skia. (github-poc-repo)
- PoC for a Chrome integer overflow -> OOB write vulnerability I reported to Google in Skia. (github-poc)
- PoC for a Chrome integer overflow -> OOB write vulnerability I reported to Google in Skia. (github-poc)
- PoC for a Chrome integer overflow -> OOB write vulnerability I reported to Google in Skia. (github-poc)
…and 3 more exploits
Timeline
- Aug 28, 2024 CVE Published
- Aug 29, 2024 EPSS Score
- Sep 18, 2024 EPSS Score
- Oct 9, 2024 EPSS Score
- Oct 27, 2024 CVE Updated
- Oct 29, 2024 EPSS Score
- Nov 18, 2024 EPSS Score
- Dec 9, 2024 EPSS Score
- Dec 30, 2024 EPSS Score
- Jan 19, 2025 EPSS Score
- Feb 28, 2025 EPSS Score
- Mar 21, 2025 EPSS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1946.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1946 advisory
- https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop_28.html advisory
- https://lists.debian.org/debian-security-announce/2024/msg00174.html advisory
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/RIZKO6CBLHDIQSHSR5OD4LHRUHJOZWTG/ advisory
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RIZKO6CBLHDIQSHSR5OD4LHRUHJOZWTG/ advisory
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/GYIF7RESU4PKGREHH5YVHUYYGB57P4CQ/ advisory
- https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-2129.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-2129 advisory
- https://msrc.microsoft.com/update-guide/ advisory
- https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security advisory