Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution

Multiple high-severity Google Chrome vulnerabilities (notably CVE-2024-8362 — use-after-free in WebAudio, and CVE-2024-7970 — out-of-bounds write in V8) could be exploited via drive-by compromise to achieve arbitrary code execution in the context of the logged-on user; impact depends on user privileges and could include installing programs, data access/modification, or account creation.