CVE-2024-7971
Google Chromium V8 Type Confusion Vulnerability
CVSS
—
Sem CVSS
EPSS
21.0%
p98
KEV
SIM
26 de ago. de 2024
Exploit Today
79
0-100
Publicado: — · Última mod.: —
Produto
Google / Chromium V8
Vulnerabilidade
Google Chromium V8 Type Confusion Vulnerability
Adicionado ao KEV
26 de ago. de 2024
Corrigir até
16 de set. de 2024
Uso conhecido em ransomware
Não
Descrição resumida
Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
Ação necessária
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Notas
https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop_21.html; https://nvd.nist.gov/vuln/detail/CVE-2024-7971