Skip to content
8.8 High

CVE-2024-7971 Google Chromium V8 Type Confusion Vulnerability

Active exploitation observed

· CISA KEV catalogue
Required action Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Ransomware campaigns Not observed so far
Weakness CWE-843

Description

Type confusion in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Affected products and versions

Product Affected versions Fixed in
Chrome 128.0 earliest → < 128.0.6613.84 128.0.6613.84
The 6072 CVEs of Chrome →
Track this CVE