IP-DB.com
Türkçe English Deutsch Español
Anmelden API-Schlüssel holen
8.8Hoch KEV

CVE-2024-7971Google Chromium V8 Type Confusion Vulnerability

Google Chrome; google chrome Veröffentlicht: (vor 2 Jahren)

Bekannt ausgenutzt — Google Chromium V8 Type Confusion Vulnerability

CISA hat am 26.08.2024 bestätigt, dass diese Schwachstelle in echten Angriffen genutzt wird. Frist für US-Bundesbehörden: 16.09.2024.

Erforderliche Maßnahme: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop_21.html; https://nvd.nist.gov/vuln/detail/CVE-2024-7971

Beschreibung

Type confusion in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Schwachstellentyp (CWE): CWE-843

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
Google Chrome 128.0.6613.84 – < 128.0.6613.84
microsoft edge < 128.0.2739.42

Referenzen und Patches

CPE-Treffer (NVD) (2)
  • cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* < 128.0.6613.84
  • cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:* < 128.0.2739.42

Neue CVEs im selben Produkt — Google Chrome

8.8Hoch
CVE-2026-126860
Google Chrome

Incorrect authorization in FileSystem in Google Chrome prior to 157.0.8103.78 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

8.8Hoch
CVE-2026-126890
Google Chrome

Out of bounds read in Media in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

8.8Hoch
CVE-2026-126899
Google Chrome

Use after free in Elements in Google Chrome prior to 157.0.8103.78 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

4.3Mittel
CVE-2026-126920
Google Chrome

Information leak in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)

3.1Niedrig
CVE-2026-126841
Google Chrome

Out of bounds read in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)

8.8Hoch
CVE-2026-126868
Google Chrome

Type confusion in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)