CVE-2024-7971
Act now ● On CISA KEV — actively exploited
Actively exploited — on the CISA KEV list.
CVSS base
—
EPSS — probability of exploitation (30 days)
20.7%
97.4th percentile
CISA KEV
Listed
Added 2024-08-26 · patch by 2024-09-16
Weakness / dates
—
Published — · modified —
Description
Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.