Stable Channel Update · V8 Engine
Google Chrome Security Advisory: CVE-2024-4947 V8 Type Confusion
Technical summary of Chrome’s stable-channel update for CVE-2024-4947, a V8 type-confusion vulnerability Google identified as exploited in the wild.
Google released a Chrome security update for Windows, Mac, and Linux to address
CVE-2024-4947, an actively exploited type-confusion vulnerability in the V8 JavaScript engine. Google’s advisory says a crafted HTML page could allow an attacker to execute arbitrary code inside the V8 sandbox. The May 15, 2024 release containing the fix was Chrome 125.0.6422.60 on Linux and 125.0.6422.60/.61 on Windows and Mac. Those are historical fixed builds; install a currently supported Chrome release rather than running an obsolete 125 build.