# MA-1072.052024: MyCERT Advisory - Security Updates- Google Chrome Multiple Vulnerabilities

**Date:** 23 May 2024  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-1072.052024  
**Advisory ID:** MA-1072.052024

---

**1.0 Introduction**
Google has released security to address multiple vulnerabilities in the Chrome web browser, including a new zero-day vulnerability (CVE-2024-4947) that is being actively exploited by threat actors.
**2.0 Impact**
These vulnerabilities could potentially allow attackers to remotely execute arbitrary code on a victim’s machine, leading to compromise of the system.
**3.0 Affected Products**
- **CVE-2024-4947 (High):** Type Confusion in V8. This vulnerability allows an attacker to execute arbitrary code on a victim's machine by exploiting a type confusion error in the V8 JavaScript engine.
- **CVE-2024-4948 (High):** Use after free in Dawn. This vulnerability can be exploited by an attacker to crash the browser or potentially execute arbitrary code.
- **CVE-2024-4949 (Medium):** Use after free in V8. Similar to CVE-2024-4948, this vulnerability can lead to a browser crash or potentially arbitrary code execution.
- **CVE-2024-4950 (Low):** Inappropriate implementation in Downloads. This vulnerability could potentially allow an attacker to bypass certain security restrictions.
**4.0 Recommendations**
Users are recommended to update version for stable channel update to 125.0.6422.60/.61 for Mac and Windows and 125.0.6422.60 for Linux, for extended stable channel update to 124.0.6367.221 for Windows and Mac and 125.0.6422.53 for Android Chrome to mitigate potential threats. Users are also encouraged to enable the automatic update function in Chrome to ensure that their software is updated promptly.
Generally, CyberSecurity Malaysia advises the users of this devices to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact us through the following channels:
E-mail: cyber999[at]cybersecurity.my 
Phone: 1-300-88-2999 (monitored during business hours) 
Mobile: +60 19 2665850 (24x7 call incident reporting) 
Business Hours: Mon - Fri 08:30 -17:30 MYT 
Web: [https://www.mycert.org.my](https://www.mycert.org.my/) 
**5.0    References**
- <https://chromereleases.googleblog.com/2024/05/extended-stable-channel-update-for.html>
- <https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_15.html>
- <https://chromereleases.googleblog.com/2024/05/chrome-for-android-update_15.html>