---
title: Threat Bulletin – CVE-2024-2883
description: Stay informed on CVE-2024-2883, a critical vulnerability in Google Chrome and Microsoft Edge, with insights and mitigation strategies.
image: https://www.morphisec.com/hubfs/CVE-2024-2883.png
---

Recent Webinar: Building an Adaptive Cyber Resilient Cloud

![arrow-white](https://www.morphisec.com/hubfs/arrow-white.svg) ![arrow-white](https://www.morphisec.com/hubfs/arrow-white.svg) [![Watch now](https://no-cache.hubspot.com/cta/default/1534169/6359793e-b232-4b79-9da5-b929fc3dc7aa.png)](https://cta-redirect.hubspot.com/cta/redirect/1534169/6359793e-b232-4b79-9da5-b929fc3dc7aa)

![close](https://www.morphisec.com/hubfs/close.svg)

![search_icon](https://www.morphisec.com/hubfs/search_icon.svg)

[![Morphisec-Logo](https://www.morphisec.com/hubfs/Morphisec-Logo.svg "Morphisec-Logo")](http://www.morphisec.com)

![blog](https://www.morphisec.com/hubfs/blog.svg) [![Read the Blog](https://no-cache.hubspot.com/cta/default/1534169/3c83d6d5-0c56-47b7-8aee-ae6edf73c360.png)](https://cta-redirect.hubspot.com/cta/redirect/1534169/3c83d6d5-0c56-47b7-8aee-ae6edf73c360)

[![Get A Demo](https://no-cache.hubspot.com/cta/default/1534169/d4f17ebf-d8a2-49c3-9bca-a8f8112b45f3.png)](https://cta-redirect.hubspot.com/cta/redirect/1534169/d4f17ebf-d8a2-49c3-9bca-a8f8112b45f3)

[![Morphisec-Logo](https://www.morphisec.com/hubfs/Morphisec-Logo.svg "Morphisec-Logo")](http://www.morphisec.com)

![search_icon](https://www.morphisec.com/hubfs/search_icon.svg)

- ![blog](https://www.morphisec.com/hubfs/blog.svg) [![Read the Blog](https://no-cache.hubspot.com/cta/default/1534169/3c83d6d5-0c56-47b7-8aee-ae6edf73c360.png)](https://cta-redirect.hubspot.com/cta/redirect/1534169/3c83d6d5-0c56-47b7-8aee-ae6edf73c360)
- [![Get A Demo](https://no-cache.hubspot.com/cta/default/1534169/d4f17ebf-d8a2-49c3-9bca-a8f8112b45f3.png)](https://cta-redirect.hubspot.com/cta/redirect/1534169/d4f17ebf-d8a2-49c3-9bca-a8f8112b45f3)

Cybersecurity Blog

Cybersecurity News, Threat Research, and more from the Team Spearheading the Evolution of Endpoint Security

# Threat Bulletin – CVE-2024-2883

Posted by [Jay Kurup](https://1534169.hs-sites.com/author/jay-kurup) on April 3, 2024

- [Tweet](https://twitter.com/share)

CVE-2024-2883 is a critical vulnerability found in ANGLE, a component of Google Chrome and Microsoft Edge. The vulnerability is exploitable via crafted HTML pages, allowing remote attackers to exploit heap corruption. The potential impact is high, enabling drive-by attacks leading to system compromise, with reports of active exploitation in the wild confirmed by the Chromium group.

# **![CVE 2024 2883 Threat ](https://www.morphisec.com/hubfs/Threat%20CVE%202024%202883.webp)**

# **CVE-2024-2883: Details** 

| **Description​**  | Use after free (UAF) in ANGLE in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.   |
| --- | --- |
| **CVE listing**  | [https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2883](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2883)   [https://nvd.nist.gov/vuln/detail/CVE-2024-2883](https://nvd.nist.gov/vuln/detail/CVE-2024-2883)   [https://vuldb.com/?id.258070](https://vuldb.com/?id.258070)   |
| **Published**  | 26-Mar-2024, updated 29-Mar-2024  |
| **Severity**  | Critical  |
| **C****ISA KEV listing**  | N/A  |
| **Vulnerable software**  | Google Chrome versions prior to 123.0.6312.86  Microsoft Edge versions prior 123.0.2420.65  |
| **Potential impact**  | High. The vulnerability enables an attacker to create a specially crafted HTML page which can be used in drive-by attacks.  Loading the webpage can lead to compromising the system.  |
| **Exploited in the wild**  | Yes, reported by the Chromium group as being actively exploited.  |
| **Security advisories**  | [https://chromereleases.googleblog.com/2024/03/stable-channel-update-for-desktop_26.html](https://chromereleases.googleblog.com/2024/03/stable-channel-update-for-desktop_26.html)     [https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-2883](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-2883)   |

## Analysis:  

[ANGLE](https://github.com/google/angle) (Almost Native Graphics Layer Engine) is a Chromium component that allows the execution of WebGL (Web Graphic Library) and OpenGL graphics, enabling rendering interactive 2D and 3D graphic within compatible browsers.

Use after free (UAF) is a vulnerability related to incorrect use of dynamic memory during program operation. If after freeing a memory location, a program does not clear the pointer to that memory, an attacker can use the error to hack the program (source: [Kaspersky](https://encyclopedia.kaspersky.com/glossary/use-after-free/)).

 

This vulnerability potentially enables an attacker to create a specially crafted HTML page which can be used in drive-by attacks. Loading the webpage can lead to exploiting the vulnerability and compromising the system. Once exploited the vulnerability potentially allows attackers to access system resources with the user’s privileges.

 

## **CVE-2024-2883 is related to multiple Chrome vulnerabilities with similar mechanisms **

- CVE-2024-2885: Use After Free In Dawn (Severity: High)
- CVE-2024-2886: Use after free in WebCodecs (Severity: High)
- CVE-2024-2887: Type Confusion in WebAssembly (Severity: High)

 

## **Morphisec Protection Mechanisms**

Virtual Patching of the application by Automated Moving Target Defense (AMTD)

Visibility of vulnerable versions of Chrome

 

# **How Morphisec prevents the attack**

Morphisec’s [Automated Moving Target Defense (AMTD)](https://www.morphisec.com/moving-target-defense) implementation offers [virtual patching](https://www.morphisec.com/virtual-patch) protection for the vulnerability. Morphisec protects the web browsers and by application of AMTD negates the vulnerability itself by constantly re-arranging the attack surface during application load time. This protection is significant as AMTD application offers signatureless protection and is resistant to changing techniques of the attackers.

 

Morphisec’s [Adaptive Exposure Management](https://www.morphisec.com/products/adaptive-exposure-management) also provides clear visibility of the systems running vulnerable versions of the application to better prioritize the patching strategy.

 

Morphisec’s ability to protect against unpatched vulnerabilities is especially crucial given the ongoing [NIST NVD crisis](https://1534169.hs-sites.com/national-vulnerability-database-defend-unpatched-vulnerabilities) and lack of enriched CVE data.

 

## **Mitigation Recommendations **

- Apply browser updates
- Ensure Morphisec protects all devices with chrome browsers

### Subscribe to our blog

Stay in the loop with industry insight, cyber security trends, and cyber attack information and company updates.

[![New call-to-action](https://no-cache.hubspot.com/cta/default/1534169/e098d357-1710-4cfe-8901-19c93de122f4.png)](https://cta-redirect.hubspot.com/cta/redirect/1534169/e098d357-1710-4cfe-8901-19c93de122f4)

### Search Our Site

### Recent Posts

### Posts by Tag

- [Automated Moving Target Defense (157)](https://1534169.hs-sites.com/topic/automated-moving-target-defense)
- [Threat Research (135)](https://1534169.hs-sites.com/topic/threat-research)
- [Cyber Security News (132)](https://1534169.hs-sites.com/topic/cyber-security-news)
- [Morphisec Labs (127)](https://1534169.hs-sites.com/topic/morphisec-labs)
- [Morphisec News (54)](https://1534169.hs-sites.com/topic/morphisec-news)
- [Adaptive Exposure Management (14)](https://1534169.hs-sites.com/topic/adaptive-exposure-management)
- [Defense-in-Depth (13)](https://1534169.hs-sites.com/topic/defense-in-depth)
- [Ransomware (12)](https://1534169.hs-sites.com/topic/ransomware)
- [Preemptive Security (11)](https://1534169.hs-sites.com/topic/preemptive-security)
- [Gartner (10)](https://1534169.hs-sites.com/topic/gartner)
- [Continuous Threat Exposure Management (CTEM) (9)](https://1534169.hs-sites.com/topic/continuous-threat-exposure-management-ctem)
- [Microsoft (8)](https://1534169.hs-sites.com/topic/microsoft)
- [In-Memory Attacks (7)](https://1534169.hs-sites.com/topic/in-memory-attacks)
- [Healthcare Cybersecurity (6)](https://1534169.hs-sites.com/topic/healthcare-cybersecurity)
- [Advanced Threat Defense (5)](https://1534169.hs-sites.com/topic/advanced-threat-defense)
- [Financial Cybersecurity (5)](https://1534169.hs-sites.com/topic/financial-cybersecurity)
- [Legacy Security (5)](https://1534169.hs-sites.com/topic/legacy-security)
- [Artificial Intelligence (4)](https://1534169.hs-sites.com/topic/artificial-intelligence)
- [Linux Cybersecurity (4)](https://1534169.hs-sites.com/topic/linux-cybersecurity)
- [Fileless Malware (3)](https://1534169.hs-sites.com/topic/fileless-malware)
- [Threat and Vulnerability Management (2)](https://1534169.hs-sites.com/topic/threat-and-vulnerability-management)
- [Managed Service Providers (1)](https://1534169.hs-sites.com/topic/managed-service-providers)

[See all](https://1534169.hs-sites.com/cve-2024-2883#)

- [![X](https://1534169.hs-sites.com/hubfs/x_twitter_icon.svg)](https://twitter.com/morphisec)
- [![Linkedin](https://1534169.hs-sites.com/hubfs/linkedin_icon.svg)](https://www.linkedin.com/company/morphisec)
- [![Youtube](https://1534169.hs-sites.com/hubfs/youtube_icon.svg)](https://www.youtube.com/channel/UCe48cR5xTxPJSYMjG-So7Rw)

© 2026 Morphisec Ltd. | All rights reserved

![iso27001-(2)](https://www.morphisec.com/hubfs/iso27001-(2).png)

```json
{
  "@context" : "https://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "Jay Kurup",
    "url" : "https://1534169.hs-sites.com/author/jay-kurup"
  },
  "dateModified" : "2024-05-09T07:10:41.076Z",
  "datePublished" : "2024-04-03T15:54:33.000Z",
  "headline" : "Threat Bulletin – CVE-2024-2883",
  "image" : [ "https://www.morphisec.com/hubfs/CVE-2024-2883.png" ],
  "mainEntityOfPage" : {
    "@id" : "https://1534169.hs-sites.com/cve-2024-2883",
    "@type" : "WebPage"
  },
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "url" : "https://www.morphisec.com/hubfs/morphisec-logo-color-horz.png"
    },
    "name" : "Morphisec"
  }
}
```