# MA-1099.072024: MyCERT Advisory - Security Updates – Google Chrome

**Date:** 19 Jul 2024  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-1099.072024  
**Advisory ID:** MA-1099.072024

---

**1.0 Introduction**
Recently, Google has released security updates to address multiple vulnerabilities in the Chrome web browser.
**2.0 Impact**
A vulnerabilities could potentially allow attackers to remotely execute arbitrary code on victim’s machine, leading to compromise of the system.
**3.0 Affected Products**
- CVE-2024-6772 (High): Inappropriate implementation in V8. A remote attacker to perform out of bounds memory access via crafted HTML page.
- CVE-2024-6773 (High): Type Confusion in V8. A remote attacker to potentially exploit heap corruption via a crafted HTML page.
- CVE-2024-6774 (High): Use after free in Screen Capture. A remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page.
- CVE-2024-6775 (High): Use after free in Media Stream. A remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page.
- CVE-2024-6776 (High): Use after free in Audio. A remote attacker to potentially exploit heap corruption via a crafted HTML page.
- CVE-2024-6777 (High): Use after free in Navigation. An attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension.
- CVE-2024-6778 (High): Race in DevTools. An attacker who convinced a user to install a malicious extension to injects scripts or HTML into a privileged page via a crafted Chrome Extension.
- CVE-2024-6779 (High): Out of bounds memory access in V8. A remote attacker to potentially perform a sandbox escape via a crafted HTML page.
**4.0 Recommendations**
CyberSecurity Malaysia encourages users and administrators to review [Google Chrome’s releases](https://chromereleases.googleblog.com/) for more information and apply the necessary updates.
Kindly refer to the following URLs for more information:
- <https://chromereleases.googleblog.com/2024/07/stable-channel-update-for-desktop.html>
Generally, CyberSecurity Malaysia advises the users of this devices to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact us through the following channels:
E-mail: cyber999[at]cybersecurity.my 
Phone: 1-300-88-2999 (monitored during business hours) 
Mobile: +60 19 2665850 (24x7 call incident reporting) 
Business Hours: Mon - Fri 08:30 -17:30 MYT 
Web: [https://www.mycert.org.my](https://www.mycert.org.my/) 
**5.0 References**
- <https://chromereleases.googleblog.com/2024/07/stable-channel-update-for-desktop.html>