Description:

CVE-2024-1284 is a use-after-free vulnerability in Mojo in Google Chrome prior to 121.0.6167.160. This vulnerability allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. The CVSS score for this vulnerability is 0, indicating that it is not considered a critical vulnerability. However, the SOCRadar Vulnerability Risk Score (SVRS) for this vulnerability is 0, indicating that it is still a potential threat that should be addressed.

Key Insights:

1. The vulnerability is a use-after-free issue, which is a common type of vulnerability that can lead to memory corruption and arbitrary code execution.
2. The vulnerability can be exploited remotely, meaning that an attacker does not need to have physical access to the target system to exploit it.
3. The vulnerability is rated as High in severity by Chromium, indicating that it is a serious vulnerability that could have a significant impact on the security of affected systems.

Mitigation Strategies:

1. Update Google Chrome to version 121.0.6167.160 or later.
2. Use a web browser that is not affected by this vulnerability, such as Firefox or Microsoft Edge.
3. Disable JavaScript in your web browser.
4. Be cautious when clicking on links or opening attachments in emails from unknown senders.

Additional Information:

• There are no known active exploits for this vulnerability at this time.
• The Cybersecurity and Infrastructure Security Agency (CISA) has not issued a warning about this vulnerability.
• The vulnerability is not currently being exploited in the wild.

If users have additional queries regarding this incident, they can use the 'Ask to Analyst' feature, contact SOCRadar directly, or open a support ticket for more information if necessary.