Severity
High
Analysis Summary
CVE-2024-10229 CVSS:6.5
Google Chrome could allow a remote attacker to bypass security restrictions, caused by inappropriate implementation in Extensions. By persuading a victim to visit a specially crafted Web site, an attacker could exploit this vulnerability to bypass security restrictions.
CVE-2024-10230 CVSS:8.8
Type Confusion in V8 in Google Chrome prior to 130.0.6723.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2024-10231 CVSS:8.8
Type Confusion in V8 in Google Chrome prior to 130.0.6723.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Impact
- Security Bypass
- Code Execution
Indicators of Compromise
CVE
- CVE-2024-10229
- CVE-2024-10230
- CVE-2024-10231
Affected Vendors
Affected Products
- Google Chrome - 130.0
Remediation
Upgrade to the latest version of Google Chrome, available from the Google Chrome Releases Website.