Description:

CVE-2024-1283 is a heap buffer overflow vulnerability in Skia, a graphics library used in Google Chrome. This vulnerability allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. The CVSS score for this vulnerability is 0, indicating a low severity level. However, the SOCRadar Vulnerability Risk Score (SVRS) is 42, indicating a moderate risk level. This discrepancy is due to the SVRS's integration of various vulnerability intelligence elements, including social media, news, code repositories, dark/deep web data, and associations with threat actors and malware.

Key Insights:

1. The vulnerability is actively exploited in the wild, with reports of successful attacks.
2. The vulnerability is relatively easy to exploit, requiring only a crafted HTML page.
3. The vulnerability can lead to remote code execution, allowing an attacker to take control of the affected system.
4. The vulnerability affects Google Chrome prior to version 121.0.6167.160.

Mitigation Strategies:

1. Update Google Chrome to the latest version (121.0.6167.160 or later).
2. Use a web browser other than Google Chrome until the vulnerability is patched.
3. Implement defense-in-depth security measures, such as firewalls, intrusion detection systems, and anti-malware software.
4. Educate users about the vulnerability and how to protect themselves from attacks.

Additional Information:

• Threat Actors/APT Groups: There is no information available about specific threat actors or APT groups actively exploiting this vulnerability.
• Exploit Status: Active exploits have been published.
• CISA Warnings: The Cybersecurity and Infrastructure Security Agency (CISA) has not issued a warning about this vulnerability.
• In the Wild: The vulnerability is actively exploited by hackers.

If users have additional queries regarding this incident, they can use the 'Ask to Analyst' feature, contact SOCRadar directly, or open a support ticket for more information if necessary.