CVE-2024-8636

CVE-2024-8636 describes a high-severity heap buffer overflow in Skia, a graphics engine used by Google Chrome, affecting versions prior to 128.0.6613.137. This vulnerability allows a remote attacker to potentially corrupt the heap and execute arbitrary code by enticing a user to visit a specially crafted HTML page. With a CVSS score of 8.8 (High), it presents a significant risk due to its network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. While there is no evidence of active exploitation in the wild, nor publicly available exploit code in Metasploit or ExploitDB, the vulnerability has garnered some community discussion and media coverage, indicating awareness within the security community.