Google fixed critical Chrome vulnerability CVE-2024-4058

Google fixed a serious Chrome bug known as CVE-2024-4058 in the ANGLE graphics layer engine along with four vulnerabilities in the Chrome web browser.

CVE-2024-4058 is a vulnerability in the ANGLE graphics layer engine. It allows attackers to execute arbitrary code on macOS systems. Toan Pham and Bao Pham from Qrious Secure reported a serious issue on 2024-04-02 and received a $16,000 reward for their research.

• Alert
• Vulnerabilities

NVIDIA NeMo Framework Vuln Allow Attackers RCE

By infosecbulletin / Friday , April 25 2025

The NVIDIA NeMo Framework has three vulnerabilities that could enable attackers to execute remote code, risking AI system compromise and...

Read More

• Alert
• Vulnerabilities

Cisco Issued Urgent Security Advisories For Multiple Products

By infosecbulletin / Thursday , April 24 2025

Cisco issued a security advisory about a remote code execution (RCE) vulnerability (CVE-2025-32433) affecting multiple products in its portfolio due...

Read More

• Alert
• Vulnerabilities

SonicWall patched SSLVPN Vuln Allowing Firewall Crashing

By infosecbulletin / Thursday , April 24 2025

SonicWall has revealed a vulnerability in its SonicOS SSLVPN Virtual Office interface that could let remote attackers crash firewall appliances....

Read More

• Alert
• Vulnerabilities

GitLab Releases Security Update For Multiple Vulns

By infosecbulletin / Thursday , April 24 2025

GitLab has announced a security advisory urging users to upgrade their self-managed installations right away. Versions 17.11.1, 17.10.5, and 17.9.7...

Read More

• Alert
• Cyber Attack

ISPAB president “whatsapp” got hacked via phishing link

By infosecbulletin / Wednesday , April 23 2025

Imdadul Haque, the president of Internet Service Provider of Bangladesh (ISPAB) said, I automatically got back my WhatsApp account. What...

Read More

• Alert
• Vulnerabilities

Zyxel released patches 2 vulns in its USG FLEX H series firewalls

By infosecbulletin / Wednesday , April 23 2025

Zyxel Networks has issued critical security patches for two high-severity vulnerabilities in its USG FLEX H series firewalls. These flaws...

Read More

• Data Breach
• Hot Topic

South Korea’s largest SK Telecom Hit by Malware: SIM-related info leaked

By infosecbulletin / Wednesday , April 23 2025

South Korea's largest mobile operator, SK Telecom, is warning that a malware infection allowed threat actors to access sensitive USIM-related...

Read More

• Alert

ChatGPT Develops Exploit for CVEs Before Public PoCs Share

By infosecbulletin / Wednesday , April 23 2025

Security researcher Matt Keeley showed that artificial intelligence can now develop working exploits for critical vulnerabilities before public proof-of-concept (PoC)...

Read More

• Alert
• Vulnerabilities

TP-Link Router Vulns Allow to Execute Malicious SQL Commands

By infosecbulletin / Tuesday , April 22 2025

Several vulnerabilities have been found in TP-Link routers, exposing users to serious security risks from SQL injection flaws in their...

Read More

• Alert
• Hot Topic

SSL.com’s domain validation system’s bug found: Hacker exploited

By infosecbulletin / Tuesday , April 22 2025

SSL.com has revealed a major security flaw in its domain validation system, which could enable attackers to acquire fake SSL...

Read More

The IT giant fixed a serious flaw called CVE-2024-4059, an Out of Bounds read in the V8 API, discovered by Eirik on 2024-04-08. Google fixed a high-severity flaw in Dawn. The flaw, tracked as CVE-2024-4060, is a Use after Free vulnerability in Dawn. Dawn is an open-source and cross-platform implementation of the WebGPU standard. The flaw was reported by wgslfuzz on April 9, 2024.

The Stable channel has been updated to version 124.0.6367.78/.79 for Windows and Mac. The Linux version 124.0.6367.78 will be released in the next few days/weeks.