- 330/2023
- High
Google has released an updated Chrome version 120.0.6099.129/130 for Windows, and 120.0.6099.129 for Mac and Linux to fix a zero-day vulnerability.
The addressed vulnerability could allow the remote attacker to execute a buffer overflow attack, execute arbitrary code, and gain access to the affected system by persuading the victim to visit a specially crafted website.
Google Chrome Buffer Overflow Vulnerability (CVE-2023-7024):
- CVSS: 8.8
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: Required
- Consequences: Gain Access
It should be highlighted that Google is aware that a public exploit for CVE-2023- 7024 exists in the wild.
Vulnerabilities
CVE-2023-7024
Mitigations
The enterprise should deploy this patch as soon as the testing phase is completed.