- 240/2024
- High
Google has released an updated Chrome version “128.0.6613.113/.114” for Windows and Mac, and “128.0.6613.113” for Linux.
The addressed vulnerabilities could allow the remote attacker to execute arbitrary code and gain access or cause a buffer overflow into the affected system by persuading the victim to visit a specially crafted Website.
Sample of the addressed vulnerabilities:
Google Chrome Code Execution Vulnerability (CVE-2024-7969):
- CVSS: 8.8
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: Required
- Consequences: Gain Access
Vulnerabilities
- CVE-2024-7969
- CVE-2024-8193
- CVE-2024-8194
- CVE-2024-8198
Mitigations
The enterprise should deploy this patch as soon as the testing phase is completed.