praetorian-inc / chariot-ui

Chariot Offensive Security Platform
https://preview.chariot.praetorian.com
MIT License
15 stars 6 forks source link

CISA KEV Alert: Google Chromium V8 Type Confusion Vulnerability (CVE-2024-5274) #23

Closed UNC1739 closed 3 weeks ago

UNC1739 commented 3 weeks ago

CVE ID: CVE-2024-5274 Vendor/Project: Google Product: Chromium V8 Vulnerability Name: Google Chromium V8 Type Confusion Vulnerability Date Added: 2024-05-28 Short Description: Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to execute code via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. Required Action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Due Date: 2024-06-18 Known Ransomware Use: Unknown Notes: https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_23.html?m=1