Google Chromium V8 Out-of-Bounds Read Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 08/06/2022. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| chrome | < 49.0.2623.108 | 49.0.2623.108 |
The Array.prototype.concat implementation in builtins.cc in Google V8, as used in Google Chrome before 49.0.2623.108, does not properly consider element data types, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via crafted JavaScript code.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free