CISA Flags Critical Apache OFBiz Flaw and Google Chromium V8 Bug

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical vulnerability in Apache OFBiz, identified as CVE-2024-38856, to its Known Exploited Vulnerabilities list. This flaw allows remote code execution (RCE) attacks, posing a significant risk to businesses. Proof-of-concept exploits for this vulnerability are already publicly available, prompting urgent system updates. Additionally, CISA has flagged a Google Chromium V8 bug, highlighting the need for immediate attention to security updates across all Chromium-based browsers, including Arc, Brave, Microsoft Edge, Opera, and Vivaldi.