CVE-2024-0517

HIGH 8.8CVE-2024-0517 · Published 16/01/2024 · updated 17/06/2026

Package	Affected versions	Patched versions
chrome google	`< 120.0.6099.224`	`120.0.6099.224`

Description

Out of bounds write in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

References

chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop_16.html · Release Notes
crbug.com/1515930 · Permissions Required
lists.fedoraproject.org/archives/list/[email protected]/message/IIUBRVICICWREJQUVT67RS7E4PVZQ5RS · Mailing List
lists.fedoraproject.org/archives/list/[email protected]/message/TNN4SO5UI3U3Q6ASTVT6WMZ4723FYDLH · Mailing List
vicarius.io/vsociety/posts/out-of-bound-write-in-v8-javascript-engine-cve-2024-0517

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free