Source: Ministry of education information & communication security contingency platform
| ublication Number | TACERT-ANA-2024052201051616 | Publication Time | 2024/05/22 13:50 |
| Incident Type | ANA-Vulnerability Alert | Discovery Time | 2024/05/22 13:50 |
| Impact Level | Medium | ||
| [Subject] 【Vulnerability Alert】 Chromium-Based Browsers Have a Security Vulnerability (CVE-2024-4671), Please Confirm and Patch Promptly |
|||
| [Content] Forwarded from the National Institute of Cyber Security NISAC-200-202405-00000112 Researchers have discovered a Use After Free vulnerability (CVE-2024-4671) in Chromium-based browsers such as Google Chrome, Microsoft Edge, and Vivaldi. This vulnerability has already been exploited by hackers. Please confirm and patch promptly. Information Sharing Level: WHITE (Information content can be publicly disclosed) |
|||
| [Affected Platform] ● Google Chrome versions below 124.0.6367.201 ● Microsoft Edge (Based on Chromium) versions below 124.0.2478.105 ● Vivaldi versions below 6.7.3329.31 |
|||
| [Recommended Actions] 1.Please update Google Chrome to version 124.0.6367.201 or above https://support.google.com/chrome/answer/95414?hl=zh-Hant 2.Please update Microsoft Edge to version 124.0.2478.105 or above https://support.microsoft.com/zh-tw/topic/microsoft-edge-%E6%9B%B4%E6%96%B0%E8%A8%AD%E5%AE%9A-af8aaca2-1b69-4870-94fe-18822dbb7ef1 3.Please update Vivaldi to version 6.7.3329.31 or above https://help.vivaldi.com/desktop/install-update/update-vivaldi/ |
|||
| [Reference] 1. https://nvd.nist.gov/vuln/detail/cve-2024-4671 2. https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_9.html 3. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-4761 4. https://vivaldi.com/blog/desktop/minor-update-five-6-7/ |
|||