INITIALIZING
📧 info@ciso.sa | 📱 +966550939344 | Riyadh, Kingdom of Saudi Arabia
🔧 Scheduled Maintenance — Saturday 2:00-4:00 AM AST. Some features may be temporarily unavailable.    ●   
💎
Pro Plan 50% Off Unlock all AI features, unlimited reports, and priority support. Upgrade
Search Center
ESC to close
Global vulnerability Enterprise Software and Database Management CRITICAL 21m Global vulnerability Information Technology CRITICAL 54m Global malware Financial Services HIGH 1h Global vulnerability Technology/Software CRITICAL 1h Global vulnerability Information Technology HIGH 2h Global data_breach Government CRITICAL 11h Global ransomware Financial Services / Cybersecurity CRITICAL 11h Global vulnerability Information Technology / Cybersecurity CRITICAL 13h Global malware Energy and Utilities CRITICAL 14h Global ransomware Multiple sectors CRITICAL 14h Global vulnerability Enterprise Software and Database Management CRITICAL 21m Global vulnerability Information Technology CRITICAL 54m Global malware Financial Services HIGH 1h Global vulnerability Technology/Software CRITICAL 1h Global vulnerability Information Technology HIGH 2h Global data_breach Government CRITICAL 11h Global ransomware Financial Services / Cybersecurity CRITICAL 11h Global vulnerability Information Technology / Cybersecurity CRITICAL 13h Global malware Energy and Utilities CRITICAL 14h Global ransomware Multiple sectors CRITICAL 14h Global vulnerability Enterprise Software and Database Management CRITICAL 21m Global vulnerability Information Technology CRITICAL 54m Global malware Financial Services HIGH 1h Global vulnerability Technology/Software CRITICAL 1h Global vulnerability Information Technology HIGH 2h Global data_breach Government CRITICAL 11h Global ransomware Financial Services / Cybersecurity CRITICAL 11h Global vulnerability Information Technology / Cybersecurity CRITICAL 13h Global malware Energy and Utilities CRITICAL 14h Global ransomware Multiple sectors CRITICAL 14h
Vulnerabilities

CVE-2024-4671

Critical 🇺🇸 CISA KEV ⚡ Exploit Available
Google Chromium Visuals Use-After-Free Vulnerability — Google Chromium Visuals contains a use-after-free vulnerability that allows a remote attacker to exploit heap corruption via a crafted HTML page.
Published: May 13, 2024  ·  Source: CISA_KEV
CVSS v3
9.0
🔗 NVD Official
📄 Description (English)

Google Chromium Visuals Use-After-Free Vulnerability — Google Chromium Visuals contains a use-after-free vulnerability that allows a remote attacker to exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

🤖 AI Executive Summary

CVE-2024-4671 is a critical use-after-free vulnerability in Google Chromium's Visuals component that allows remote attackers to exploit heap corruption through malicious HTML pages. This vulnerability affects multiple Chromium-based browsers including Chrome, Edge, and Opera, potentially enabling arbitrary code execution.

📄 Description (Arabic)

ثغرة Use-After-Free في مكون Visuals بـ Google Chromium تسمح للمهاجمين بالوصول إلى ذاكرة تم تحريرها بالفعل، مما يؤدي إلى تلف الذاكرة. يمكن استغلال هذه الثغرة عن بعد من خلال صفحة HTML مصممة بعناية لتنفيذ كود عشوائي بامتيازات المتصفح.

🤖 ملخص تنفيذي (AI)

CVE-2024-4671 عبارة عن ثغرة حرجة في مكون Visuals في Google Chromium تسمح للمهاجمين البعيدين باستغلال تلف الذاكرة من خلال صفحات HTML ضارة. تؤثر هذه الثغرة على عدة متصفحات قائمة على Chromium بما في ذلك Chrome و Edge و Opera.

🤖 AI Intelligence Analysis Analyzed: Apr 20, 2026 04:16
🇸🇦 Saudi Arabia Impact Assessment
Saudi Relevance: high
🏢 Affected Saudi Sectors
banking government telecom healthcare
🎯 MITRE ATT&CK Techniques
⚖️ Saudi Risk Score (AI)
9.0
/ 10.0
🔧 Remediation Steps (English)
Immediately update all Chromium-based browsers to the latest patched versions. For Google Chrome, update to version 124.0.6367.60 or later. For Microsoft Edge, update to version 124.0.2478.67 or later. For Opera, update to the latest available version. Implement browser security policies restricting execution of untrusted content and consider deploying web content filtering solutions.
🔧 خطوات المعالجة (العربية)
قم بتحديث جميع متصفحات Chromium إلى أحدث الإصدارات المصححة فوراً. لـ Google Chrome، حدّث إلى الإصدار 124.0.6367.60 أو أحدث. لـ Microsoft Edge، حدّث إلى الإصدار 124.0.2478.67 أو أحدث. لـ Opera، حدّث إلى أحدث إصدار متاح. طبّق سياسات أمان المتصفح التي تقيد تنفيذ المحتوى غير الموثوق وفكّر في نشر حلول تصفية محتوى الويب.
📋 Regulatory Compliance Mapping
🟢 NCA ECC 2024
5.1.1 5.2.1 5.3.1
🔵 SAMA CSF
ID.BE-5.1 PR.DS-6.1 PR.PT-3.1
🟡 ISO 27001:2022
A.12.2.1 A.12.6.1 A.14.2.1
🔗 References & Sources 0
No references.
📦 Affected Products / CPE 1 entries
Google:Chromium
📊 CVSS Score
9.0
/ 10.0 — Critical
📋 Quick Facts
Severity Critical
CVSS Score9.0
EPSS0.50%
Exploit ✓ Yes
Patch ✓ Yes
CISA KEV🇺🇸 Yes
KEV Due Date2024-06-03
Published 2024-05-13
Source Feed cisa_kev
Views 4
🇸🇦 Saudi Risk Score
9.0
/ 10.0 — Saudi Risk
Priority: CRITICAL
🏷️ Tags
kev actively-exploited
Share this CVE
📣 Found this valuable?
Share it with your cybersecurity network
in LinkedIn 𝕏 X / Twitter 💬 WhatsApp ✈ Telegram
🍪 Privacy Preferences
CISO Consulting — Compliant with Saudi Personal Data Protection Law (PDPL)
We use cookies and similar technologies to provide the best experience on our platform. You can choose which types you accept.
🔒
Essential Always On
Required for the website to function properly. Cannot be disabled.
📋 Sessions, CSRF tokens, authentication, language preferences
📊
Analytics
Help us understand how visitors use the site and improve performance.
📋 Page views, session duration, traffic sources, performance metrics
⚙️
Functional
Enable enhanced features like content personalization and preferences.
📋 Dark/light theme, font size, custom dashboards, saved filters
📣
Marketing
Used to deliver content and ads relevant to your interests.
📋 Campaign tracking, retargeting, social media analytics
Privacy Policy →
CISO AI Assistant
Ask anything · Documents · Support
🔐

Introduce Yourself

Enter your details to access the full assistant

Your info is private and never shared
💬
CyberAssist
Online · responds in seconds
5 / 5
🔐 Verify Your Identity

Enter your email to receive a verification code before submitting a support request.

Enter to send · / for commands 0 / 2000
CISO AI · Powered by Anthropic Claude
✦ Quick Survey Help Us Improve CISO Consulting Your feedback shapes the future of our platform — takes less than 2 minutes.
⚠ Please answer this question to continue

How would you rate your overall experience with our platform?

Rate from 1 (poor) to 5 (excellent)

🎉
Thank you!
Your response has been recorded.