CVE-2024-6779 - Out of bounds memory access in V8 in Google Chrome prior to 126.0.6478.182 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page

Back Back to CVE browser

CRITICAL

Out of bounds memory access in V8 in Google Chrome prior to 126.0.6478.182 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page

Published Jul 16, 2024

9.6

CRITICAL

CVSS 3.1

EPSS 6.26%

Description

Out of bounds memory access in V8 in Google Chrome prior to 126.0.6478.182 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

Affected products

Vendor Google Product Chrome Default
unknown
Affected
- ≥ 126.0.6478.182, < 126.0.6478.182

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Google	Chrome	unknown	Affected ≥ 126.0.6478.182, < 126.0.6478.182

Vendor Google Product Chrome Default
unknown
Affected
- ≥ 0, < 126.0.6478.182

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Google	Chrome	unknown	Affected ≥ 0, < 126.0.6478.182

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-125

Out-of-bounds Read

CWE-787

Out-of-bounds Write

References (3)

https://chromereleases.googleblog.com/2024/07/stable-channel-update-for-desktop.html
Release Notes
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-47811
Advisory
https://issues.chromium.org/issues/351327767
ExploitIssue Tracking

Link	Providers	Tags
https://chromereleases.googleblog.com/2024/07/stable-channel-update-for-desktop.html		Release Notes
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-47811		Advisory
https://issues.chromium.org/issues/351327767		ExploitIssue Tracking

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner Chrome

Published Jul 16, 2024

Updated Mar 20, 2025

Reserved Jul 16, 2024

Link CVE-2024-6779

CISA Vulnrichment

Updated Jul 23, 2024

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2024-6779

Red Hat

No data

ENISA EUVD

Assigner Chrome

Published Jul 16, 2024

Updated Mar 20, 2025

Link EUVD-2024-47811

GitHub

No data