# MA-1070.052024: MyCERT Advisory - Google Chrome Zero-Day Vulnerability

**Date:** 15 May 2024  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-1070.052024  
**Advisory ID:** MA-1070.052024

---

**1.0 Introduction**
Google has released security patches for the Chrome browser in order to fix a zero-day vulnerability of high severity that it claims has been used in the wild. The high-severity vulnerability, tracked as CVE-2024-4761, is an out-of-bounds write bug impacting the V8 JavaScript and WebAssembly engine.
**2.0 Impact**
The out-of-bounds write bugs could typically exploited by malicious actors to corrupt data or induce a crash or execute arbitrary code on compromised hosts.
**3.0 Affected Products**
The affected Chrome browsers are;
- All prior to version 124.0.6367.207/.208 for Windows and Mac.
- All prior to version 124.0.6367.207 for Linux.
**4.0 Recommendations**
Users are recommended to update to version 124.0.6367.207/.208 for Mac and Windows and 124.0.6367.207 for Linux to mitigate potential threats. Users are also encouraged to enable the automatic update function in Chrome to ensure that their software is updated promptly.
Generally, CyberSecurity Malaysia advises the users of this devices to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact us through the following channels:
E-mail: cyber999[at]cybersecurity.my 
Phone: 1-300-88-2999 (monitored during business hours) 
Mobile: +60 19 2665850 (24x7 call incident reporting) 
Business Hours: Mon - Fri 08:30 -17:30 MYT 
Web: [https://www.mycert.org.my](https://www.mycert.org.my/) 
**5.0    References**
- <https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_13.html>
- <https://www.bleepingcomputer.com/news/security/google-chrome-emergency-update-fixes-6th-zero-day-exploited-in-2024/>
- <https://www.darkreading.com/vulnerabilities-threats/dangerous-google-chrome-zero-day-sandbox-escape>
- <https://thehackernews.com/2024/05/new-chrome-zero-day-vulnerability-cve.html>