{"metadata": {"vulnerability": "CVE-2024-45489", "count": 22, "kinds": {"milestone": 4, "sighting": 10, "kev": 0, "other": 8}}, "data": [{"timestamp": "2024-08-30T00:00:00Z", "date_only": false, "value": "2024-08-30T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-45489", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-09-20T00:00:00Z", "date_only": false, "value": "2024-09-20T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-45489", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-09-20T17:15:15Z", "date_only": false, "value": "2024-09-20T17:15:15Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-84Q8-HPHJ-4R7W", "record": "GHSA-84Q8-HPHJ-4R7W", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-09-20T17:15:15.060Z", "date_only": false, "value": "2024-09-20T17:15:15.060", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-45489", "record": "FKIE_CVE-2024-45489", "field": "published"}, {"timestamp": "2024-09-20T17:21:03.827Z", "date_only": false, "value": "2024-09-20T17:21:03.827296Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-45489", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2024-09-20T17:21:03.827Z", "date_only": false, "value": "2024-09-20T17:21:03.827296Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-45489", "record": "FKIE_CVE-2024-45489", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-09-20T17:24:47.652Z", "date_only": false, "value": "2024-09-20T17:24:47.652Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-45489", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-09-20T18:32:27Z", "date_only": false, "value": "2024-09-20T18:32:27Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-84Q8-HPHJ-4R7W", "record": "GHSA-84Q8-HPHJ-4R7W", "field": "published"}, {"timestamp": "2024-09-20T18:44:54.069Z", "date_only": false, "value": "2024-09-20T18:44:54.069Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-45489", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-09-20T18:44:54.069Z", "date_only": false, "value": "2024-09-20T18:44:54.069Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2024-45489", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-09-20T19:45:10Z", "date_only": false, "value": "2024-09-20T19:45:10.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/6113", "record": "CVE-2024-45489", "field": "creation_timestamp", "uuid": "dc7cd4e5-1207-4838-a03a-44bfb3f16d17", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-45489 - Arc Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-45489 \nPublished : Sept. 20, 2024, 5:15 p.m. | 24\u00a0minutes ago \nDescription : Arc before 2024-08-26 allows remote code execution in JavaScript boosts. Boosts that run JavaScript cannot be shared by default; however, it is possible to create or update a boost using another user's ID. This installs the boost in the victim's browser and runs arbitrary Javascript on that browser in a privileged context. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/6113"}, {"timestamp": "2024-09-20T21:31:39Z", "date_only": false, "value": "2024-09-20T21:31:39Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-84Q8-HPHJ-4R7W", "record": "GHSA-84Q8-HPHJ-4R7W", "field": "modified"}, {"timestamp": "2024-09-23T08:30:38Z", "date_only": false, "value": "2024-09-23T08:30:38.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/7gCCrXcF7kplbW8vCcSuolSiDuLcYtPRKYzfdVi7ua9f0qw", "record": "CVE-2024-45489", "field": "creation_timestamp", "uuid": "e043661b-59be-4ef7-a178-389df46ce78b"}, {"timestamp": "2024-10-02T14:39:58Z", "date_only": false, "value": "2024-10-02T14:39:58.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/xakep_ru/16487", "record": "CVE-2024-45489", "field": "creation_timestamp", "uuid": "03abccc2-937f-4316-b10d-98358ef0385c", "content": "\u0411\u0440\u0430\u0443\u0437\u0435\u0440 Arc \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0443 bug bounty \u043f\u043e\u0441\u043b\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Arc, \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f The Browser Company, \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0438 \u043e \u0437\u0430\u043f\u0443\u0441\u043a\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b bug bounty, \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441\u043c\u043e\u0433\u0443\u0442 \u0441\u043e\u043e\u0431\u0449\u0430\u0442\u044c \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0437\u0430 \u044d\u0442\u043e \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u044f. \u041a \u044d\u0442\u043e\u043c\u0443 \u0448\u0430\u0433\u0443 \u0441\u043e\u0437\u0434\u0430\u0442\u0435\u043b\u0435\u0439 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \u043f\u043e\u0434\u0442\u043e\u043b\u043a\u043d\u0443\u043b\u043e \u043d\u0435\u0434\u0430\u0432\u043d\u0435\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2024-45489, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441\u043e\u0432\u0435\u0440\u0448\u0430\u0442\u044c \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Arc.\n\nhttps://xakep.ru/2024/10/02/arc-bug-bounty/", "url": "https://t.me/xakep_ru/16487"}, {"timestamp": "2024-10-02T16:38:47Z", "date_only": false, "value": "2024-10-02T16:38:47.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ton618cyber/4904", "record": "CVE-2024-45489", "field": "creation_timestamp", "uuid": "973cbb16-66bd-42e2-a496-ea24db34b121", "content": "#exploit\n1. CVE-2024-45489:\nArc Browser RCE in JavaScript Boosts\nhttps://kibty.town/blog/arc\n\n2. CVE-2024-44623:\nBlind RCE issue(SPX-GC) in SPX-GC\nhttps://github.com/merbinr/CVE-2024-44623\n\n3. CVE-2024-6769:\nPoisoning the activation cache to elevate from medium to high integrity in Windows 10/11/Srv2019/Srv2022\nhttps://github.com/fortra/CVE-2024-6769", "url": "https://t.me/ton618cyber/4904"}, {"timestamp": "2024-10-02T16:38:48Z", "date_only": false, "value": "2024-10-02T16:38:48.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ton618cyber/1582", "record": "CVE-2024-45489", "field": "creation_timestamp", "uuid": "ac7cd0c9-6124-47fb-98e7-a5e0731bf442", "content": "#exploit\n1. CVE-2024-45489:\nArc Browser RCE in JavaScript Boosts\nhttps://kibty.town/blog/arc\n\n2. CVE-2024-44623:\nBlind RCE issue(SPX-GC) in SPX-GC\nhttps://github.com/merbinr/CVE-2024-44623\n\n3. CVE-2024-6769:\nPoisoning the activation cache to elevate from medium to high integrity in Windows 10/11/Srv2019/Srv2022\nhttps://github.com/fortra/CVE-2024-6769", "url": "https://t.me/ton618cyber/1582"}, {"timestamp": "2024-11-01T03:20:06Z", "date_only": false, "value": "2024-11-01T03:20:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/11202", "record": "CVE-2024-45489", "field": "creation_timestamp", "uuid": "d536a163-ea65-46e4-9dd9-319a5b821f7c", "content": "#exploit\n1. CVE-2024-45489:\nArc Browser RCE in JavaScript Boosts\nhttps://kibty.town/blog/arc\n\n2. CVE-2024-44623:\nBlind RCE issue(SPX-GC) in SPX-GC\nhttps://github.com/merbinr/CVE-2024-44623\n\n3. CVE-2024-6769:\nPoisoning the activation cache to elevate from medium to high integrity in Windows 10/11/Srv2019/Srv2022\nhttps://github.com/fortra/CVE-2024-6769\n\n4. CVE-2024-45519: \nZimbra SMTP RCE\nhttps://blog.projectdiscovery.io/zimbra-remote-code-execution\n]-> https://github.com/p33d/CVE-2024-45519", "url": "https://t.me/CyberSecurityTechnologies/11202"}, {"timestamp": "2026-06-17T07:54:18.360Z", "date_only": false, "value": "2026-06-17T07:54:18.360", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-45489", "record": "FKIE_CVE-2024-45489", "field": "lastModified"}, {"timestamp": "2026-07-29T12:01:06.943Z", "date_only": false, "value": "2026-07-29T12:01:06.943417Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hn_best_comments/23447", "record": "CVE-2024-45489", "field": "creation_timestamp", "uuid": "a47154b4-5e3e-4b1a-8739-49e5fc522e91", "url": "https://t.me/hn_best_comments/23447"}, {"timestamp": "2026-07-30T00:01:47.139Z", "date_only": false, "value": "2026-07-30T00:01:47.139270Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hn_best_comments/23447", "record": "CVE-2024-45489", "field": "creation_timestamp", "uuid": "ed3adaff-b0e9-45c3-a0e9-9d9076462d42", "url": "https://t.me/hn_best_comments/23447"}, {"timestamp": "2026-08-01T08:00:04.771Z", "date_only": false, "value": "2026-08-01T08:00:04.771115Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hn_best_comments/23447", "record": "CVE-2024-45489", "field": "creation_timestamp", "uuid": "9619201f-6915-4621-9b00-dc0a4f0fb1df", "url": "https://t.me/hn_best_comments/23447"}, {"timestamp": "2026-08-02T00:01:12.157Z", "date_only": false, "value": "2026-08-02T00:01:12.157962Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hn_best_comments/23447", "record": "CVE-2024-45489", "field": "creation_timestamp", "uuid": "191a760c-7cfb-456c-8f60-89481b8c38c0", "url": "https://t.me/hn_best_comments/23447"}]}