CVE-2024-6988

CVSS 3.1 Score 8.8 of 10 (high)

Details

Published Aug 6, 2024
Updated: Aug 7, 2024
CWE ID 416

Summary

CVE-2024-6988 is a high severity vulnerability affecting Google Chrome on iOS versions prior to 127.0.6533.72. This issue involves a use-after-free condition in the Downloads feature, which can lead to heap corruption. A remote attacker could exploit this vulnerability by crafting a malicious HTML page, potentially gaining control over an affected device. Users are urged to update Google Chrome to the latest version to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share