【Vulnerability Alert】 Chromium-Based Browsers Have a Security Vulnerability (CVE-2024-4671), Please Confirm and Patch Promptly
publish date :
2024-05-23
update date :
2024-05-23
Source: Ministry of education information & communication security contingency platform
ublication Number | TACERT-ANA-2024052201051616 | Publication Time | 2024/05/22 13:50 |
Incident Type | ANA-Vulnerability Alert | Discovery Time | 2024/05/22 13:50 |
Impact Level | Medium | ||
[Subject] 【Vulnerability Alert】 Chromium-Based Browsers Have a Security Vulnerability (CVE-2024-4671), Please Confirm and Patch Promptly |
|||
[Content] Forwarded from the National Institute of Cyber Security NISAC-200-202405-00000112 Researchers have discovered a Use After Free vulnerability (CVE-2024-4671) in Chromium-based browsers such as Google Chrome, Microsoft Edge, and Vivaldi. This vulnerability has already been exploited by hackers. Please confirm and patch promptly. Information Sharing Level: WHITE (Information content can be publicly disclosed) |
|||
[Affected Platform] ● Google Chrome versions below 124.0.6367.201 ● Microsoft Edge (Based on Chromium) versions below 124.0.2478.105 ● Vivaldi versions below 6.7.3329.31 |
|||
[Recommended Actions] 1.Please update Google Chrome to version 124.0.6367.201 or above https://support.google.com/chrome/answer/95414?hl=zh-Hant 2.Please update Microsoft Edge to version 124.0.2478.105 or above https://support.microsoft.com/zh-tw/topic/microsoft-edge-%E6%9B%B4%E6%96%B0%E8%A8%AD%E5%AE%9A-af8aaca2-1b69-4870-94fe-18822dbb7ef1 3.Please update Vivaldi to version 6.7.3329.31 or above https://help.vivaldi.com/desktop/install-update/update-vivaldi/ |
|||
[Reference] 1. https://nvd.nist.gov/vuln/detail/cve-2024-4671 2. https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_9.html 3. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-4761 4. https://vivaldi.com/blog/desktop/minor-update-five-6-7/ |
(This notification is for informational purposes only and does not constitute a cybersecurity incident).
If you have questions or suggestions regarding this notification, please feel free to contact us.
Ministry of education information & communication security contingency platform
Website: https://info.cert.tanet.edu.tw/
Phone: +886-7-5250211
Internet Phone: 98400000
E-Mail: service@cert.tanet.edu.tw
If you have questions or suggestions regarding this notification, please feel free to contact us.
Ministry of education information & communication security contingency platform
Website: https://info.cert.tanet.edu.tw/
Phone: +886-7-5250211
Internet Phone: 98400000
E-Mail: service@cert.tanet.edu.tw
Organizer:
Computer Center