CVE-2024-9120
📋 TL;DR
This is a use-after-free vulnerability in Dawn (WebGPU implementation) in Google Chrome on Windows that allows remote attackers to potentially exploit heap corruption. Attackers can trigger this vulnerability by tricking users into visiting a malicious HTML page. All Windows users running vulnerable Chrome versions are affected.
💻 Affected Systems
- Google Chrome
- Chromium-based browsers
📦 What is this software?
Chrome by Google
Google Chrome is the world's most popular web browser, used by over 3 billion users globally across Windows, macOS, Linux, Android, and iOS platforms. As a Chromium-based browser developed by Google, Chrome dominates the browser market with approximately 65% market share, making it a critical compon...
Learn more about Chrome →⚠️ Risk & Real-World Impact
Worst Case
Remote code execution leading to full system compromise, data theft, or ransomware deployment.
Likely Case
Browser crash/denial of service or limited code execution within Chrome's sandbox.
If Mitigated
Browser crash with no further impact if sandbox holds, or blocked exploit attempt.
🎯 Exploit Status
Requires user to visit malicious page but no authentication. Heap corruption exploitation requires additional techniques to be reliable.
🛠️ Fix & Mitigation
✅ Official Fix
Patch Version: 129.0.6668.70
Vendor Advisory: https://chromereleases.googleblog.com/2024/09/stable-channel-update-for-desktop_24.html
Restart Required: Yes
Instructions:
1. Open Chrome. 2. Click three-dot menu → Help → About Google Chrome. 3. Chrome will automatically check for and install update. 4. Click 'Relaunch' to restart Chrome.
🔧 Temporary Workarounds
Disable WebGPU
allDisable WebGPU feature which contains the vulnerable Dawn component
chrome://flags/#enable-webgpu → Disabled
Disable JavaScript
allPrevents malicious HTML from executing exploit code
chrome://settings/content/javascript → Block
🧯 If You Can't Patch
- Use alternative browser without WebGPU support
- Implement network filtering to block suspicious HTML content
🔍 How to Verify
Check if Vulnerable:
Check Chrome version: if below 129.0.6668.70 on Windows, vulnerable.Check Version:
chrome://versionVerify Fix Applied:
Confirm Chrome version is 129.0.6668.70 or higher.📡 Detection & Monitoring
Log Indicators:
- Chrome crash reports
- Unexpected WebGPU process termination
Network Indicators:
- Requests to known exploit hosting domains
- Suspicious HTML with WebGPU content
SIEM Query:
source="chrome_crash_reports" AND process="chrome" AND (error="heap_corruption" OR module="dawn")