CVE-2024-2173 is a high-severity out-of-bounds memory access vulnerability in Google Chrome's V8 JavaScript engine, affecting versions prior to 122.0.6261.111, as well as Fedora Project's Chrome and Fedora. A remote attacker can exploit this by enticing a user to visit a crafted HTML page, leading to high impacts on confidentiality, integrity, and availability. While no public exploit code or active exploitation is confirmed, its high CVSS score of 8.8 indicates a significant risk. The vulnerability has garnered minimal community discussion and media coverage, with no evidence of inclusion in the KEV catalog.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 122.0.6261.111CPE matchmatch criteria | cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* | ||
40CPE matchmatch criteria | cpe:2.3:o:fedoraproject:fedora:40:*:*:*:*:*:*:* | ||
>= 122.0.6261.111, < 122.0.6261.111CPE match | cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.1 Security Researcher mentions.