Type confusion in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.
| Link | Tags |
|---|---|
| https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop_21.html | release notes |
| https://issues.chromium.org/issues/360700873 | permissions required |
| https://www.microsoft.com/en-us/security/blog/2024/08/30/north-korean-threat-actor-citrine-sleet-exploiting-chromium-zero-day/ | exploit patch third party advisory vendor advisory |