CVE-2024-0519: Google Chromium V8 Out-of-Bounds Memory Access Vulnerability
CVE-2024-0519 · Severity: critical · CVSS 8.8 · Exploited in the wild · Published 2024-01-17
An out-of-bounds memory access vulnerability in the Google Chromium V8 engine allows a remote attacker to potentially exploit heap corruption via a specially crafted HTML page. This flaw can lead to unauthorized memory access and is known to be exploited in the wild.
Yes. CVE-2024-0519 is known to be exploited in the wild, first recorded on 17 January 2024. Treat it as urgent.
How severe is CVE-2024-0519?
Critical severity, with a CVSS score of 8.8, published 17 January 2024.
Which products and versions are affected?
Google Chrome prior to 120.0.6099.224; Couchbase Couchbase Server up to (excluding) 7.2.5; Fedora Project Space Fedora 38, 39.
Is there a fix for CVE-2024-0519?
A patch was published on 2024-01-16: Google released Chrome version 120.0.6099.224 to address the vulnerability. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2024-0519 attacked?
It is attacked over the network, in a web application.
Am I affected by CVE-2024-0519?
Check whether you run Google Chromium V8. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Affected products
Google Chrome prior to 120.0.6099.224
Couchbase Couchbase Server up to (excluding) 7.2.5
Fedora Project Space Fedora 38, 39
Timeline
2024-01-16: patched: Google released Chrome version 120.0.6099.224 to address the vulnerability.
2024-01-17: disclosed
2024-01-17: kev added: Added to CISA's Known Exploited Vulnerabilities Catalog.