Google Chrome Browser (124.0.6367.60/.61) Security Update Advisory

Overview

 

Google has released an update to address a vulnerability in the Chrome(https://www.google.com/chrome) browser. users of affected versions are advised to update to the latest version.

 

Affected Products

 

Chrome prior to version 124.0.6367.60/.61 (Windows, Mac)

 

Resolved Vulnerabilities

 

Moderate security validation vulnerability in the Autofill feature (CVE-2024-3838 and 1 other) [1]

Moderate data validation vulnerability in the Browser switcher function (CVE-2024-3841 and 1 other) [1]

High-level memory free-and-reuse (UAF) vulnerability in the Downloads function (CVE-2024-3834 and 1 other) [1]

Moderate Data Validation Insufficiency Vulnerability in the Downloads function (CVE-2024-3843 and 1 other) [1]

Low-level unvalidated security vulnerability in the Extensions function (CVE-2024-3844 and 1 other) [1]

Moderate out-of-bounds read vulnerability in the Fonts function (CVE-2024-3839 and 1 other) [1]

Low-level security unvalidated vulnerability in the Network function (CVE-2024-3845 and 1 other) [1]

Low-level untested security vulnerability in the Prompts function (CVE-2024-3846 and 1 other) [1]

Moderate memory free and reuse (UAF) vulnerability in the Quic feature (CVE-2024-3837 and 1 other) [1]

Moderate policy enforcement vulnerability in Site isolation feature (CVE-2024-3840 and 1 other) [1]

High level object corruption vulnerability in V8 functionality (CVE-2024-3832 and 1 other) [1]

High-level object corruption vulnerability in Webassembly functionality (CVE-2024-3833 and 1 other) [1]

Low-level policy enforcement vulnerability in Webui functionality (CVE-2024-3847 and 1 other) [1]

 

Vulnerability Patches

 

The following Vulnerability Patches were made available in the 04/16/2024 update. For more information on Vulnerability Patches, please refer to the “Google Chrome” Referenced Sites document.

Chrome 124.0.6367.60/.61 and later (Windows, Mac)

 

Referenced Sites

 

[1] Stable Channel Update for Desktop

https://chromereleases.googleblog.com/2024/04/stable-channel-update-for-desktop_16.html

[2] Chrome Update

https://support.google.com/chrome/answer/95414?co=GENIE.Platform%3DDesktop