Description:

CVE-2024-0225 is a use-after-free vulnerability in WebGPU in Google Chrome prior to 120.0.6099.199. This vulnerability allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. The CVSS score for this vulnerability is 0, indicating a low severity level. However, the SOCRadar Vulnerability Risk Score (SVRS) for this vulnerability is 0, indicating a critical vulnerability that requires immediate action.

Key Insights:

1. The vulnerability is a use-after-free issue, which is a common type of memory corruption vulnerability that can lead to arbitrary code execution.
2. The vulnerability can be exploited remotely via a crafted HTML page, making it easy for attackers to target users.
3. The vulnerability affects Google Chrome prior to version 120.0.6099.199, which is a widely used web browser.

Mitigation Strategies:

1. Update Google Chrome to version 120.0.6099.199 or later.
2. Use a web browser that is not affected by this vulnerability, such as Firefox or Microsoft Edge.
3. Enable security features in your web browser, such as sandboxing and exploit mitigations.
4. Be cautious when clicking on links or opening attachments in emails from unknown senders.

Additional Information:

• Threat Actors/APT Groups: There is no information available about specific threat actors or APT groups actively exploiting this vulnerability.
• Exploit Status: There is no information available about active exploits for this vulnerability.
• CISA Warnings: The Cybersecurity and Infrastructure Security Agency (CISA) has not issued a warning about this vulnerability.
• In the Wild: There is no information available about whether this vulnerability is being actively exploited by hackers.

If users have additional queries regarding this incident, they can use the 'Ask to Analyst' feature, contact SOCRadar directly, or open a support ticket for more information if necessary.