Skip to main content

Google Chrome Remote Code Execution Vulnerability

Release Date: 21 Dec 2023 4702 Views

RISK: Extremely High Risk

TYPE: Clients - Browsers

TYPE: Browsers

A vulnerability has been identified in Google Chrome. A remote attacker could exploit this vulnerability to trigger remote code execution on the targeted system.

 

Note:

For CVE-2023-7024, heap buffer overflow in WebRTC. Google is aware that an exploit for CVE-2023-7024 exists in the wild.


Impact

  • Remote Code Execution

System / Technologies affected

  • Google Chrome prior to 120.0.6099.129 (Linux)
  • Google Chrome prior to 120.0.6099.129 (Mac)
  • Google Chrome prior to 120.0.6099.129/130 (Windows)

Solutions

Before installation of the software, please visit the software vendor web-site for more details.

Apply fixes issued by the vendor:

  • Update to version 120.0.6099.129 (Linux) or later
  • Update to version 120.0.6099.129 (Mac) or later
  • Update to version 120.0.6099.129/130 (Windows) or later

Vulnerability Identifier


Source


Related Link