Skip to main content
The Website Services team at NHS England are testing early designs to understand how you find information. Your views will help us check our ideas work. Sign up to take part in our user research.

Google Releases Security Update for Vulnerability CVE-2024-4671

Security update addresses one high severity vulnerability in Google Chrome that has an exploit in the wild

Threat ID:
CC-4488
Threat Severity:
Medium
Published:
10 May 2024 4:39 PM
Report a cyber attack: call 0300 303 5222 or email [email protected]

Summary

Security update addresses one high severity vulnerability in Google Chrome that has an exploit in the wild

Threat details

Introduction

Google has released a security update which addresses a high severity vulnerability in Google Chrome for Windows, Mac, and Linux.

The high severity vulnerability, designated as CVE-2024-4671, relates to a use after free condition in Visuals. A remote attacker could exploit heap corruption via a specially crafted HTML page.

Exploit for CVE-2024-4671 in the wild

Google acknowledges that an exploit for CVE-2024-4671 exists in the wild

Remediation advice

Affected organisations are encouraged to review the Chrome Release 124.0.6367.201 advisory and apply the necessary updates to the latest release.

Last edited: 10 May 2024 4:43 pm