- 7,772
- 13,008
Google has identified four critical vulnerabilities in Chrome that require immediate attention. These include CVE-2024-12692, a type confusion vulnerability in the Chrome V8 Javascript rendering engine; CVE-2024-12693, an out-of-bounds memory access vulnerability in the same engine; CVE-2024-12694, a use-after-free vulnerability in the browser's compositing function; and CVE-2024-12695, an out-of-bounds write vulnerability also in the V8 engine. Users on Windows, Mac, and Linux platforms are strongly advised to update their Chrome browsers to mitigate these security risks.
PREREQUISITESWeb developers, cybersecurity professionals, IT administrators, and anyone responsible for maintaining browser security will benefit from reading this discussion.
The four vulnerabilities that Google has confirmed are:
- CVE-2024-12692: A type confusion vulnerability in the Chrome V8 Javascript rendering engine.
- CVE-2024-12693: An out-of-bounds memory access vulnerability in the Chrome V8 Javascript rendering engine.
- CVE-2024-12694: A use-after-free vulnerability in the Chrome browser compositing function.
- CVE-2024-12695: An out-of-bounds write vulnerability in the Chrome V8 Javascript rendering engine.