Skip to content
8.8 High

CVE-2024-7965 Google Chromium V8 Inappropriate Implementation Vulnerability

Active exploitation observed

· CISA KEV catalogue
Required action Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Ransomware campaigns Not observed so far
Weakness CWE-358

Description

Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Affected products and versions

Product Affected versions Fixed in
Chrome 128.0 earliest → < 128.0.6613.84 128.0.6613.84
The 6072 CVEs of Chrome →
Track this CVE