CVE-2024-7965

Published Aug 21, 2024

Last updated a year ago

Overview

Description
Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Source
chrome-cve-admin@google.com
NVD status
Analyzed
Products
chrome, edge_chromium

Risk scores

CVSS 3.1

Type
Primary
Base score
8.8
Impact score
5.9
Exploitability score
2.8
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Severity
HIGH

Known exploits

Data from CISA

Vulnerability name
Google Chromium V8 Inappropriate Implementation Vulnerability
Exploit added on
Aug 28, 2024
Exploit action due
Sep 18, 2024
Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Weaknesses

nvd@nist.gov
CWE-787
134c704f-9b21-4f2e-91b3-4a467353bcc0
CWE-358

Social media

Hype score
Not currently trending
  1. 【ITニュース】Googleが9/5、ChromeとChromeOSに重大な脆弱性(CVE-2024-7965)の修正を含む緊急アップデートを公開。V8 https://t.co/DVz7vougwW

    @nespe_shacho

    7 Sept 2026

    114 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  2. 【ITニュース】GoogleがChromeの新バージョン128.0.6613.84を9月5日に緊急リリース。重大度「High」のゼロデイ脆弱性(CVE-2024-7965)を修正しました。既に悪用が確認されており、早急なアップデートが推奨されています

    @nespe_shacho

    6 Sept 2026

    47 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  3. Google Warns of CVE-2024-7965 Chrome Security Flaw Under Active Exploitation Google has revealed that a security flaw that was patched as part of a security update rolled out last week to its Chrome browser has come under active exploitation in the wil... https://t.co/kil9xysYyf

    @SecurityAid

    7 Dec 2024

    25 Impressions

    0 Retweets

    1 Like

    0 Bookmarks

    0 Replies

    0 Quotes

  4. Top 5 Trending CVEs: 1 - CVE-2024-23113 2 - CVE-2024-7965 3 - CVE-2024-47575 4 - CVE-2024-43451 5 - CVE-2024-5690 #cve #cvetrends #cveshield #cybersecurity https://t.co/4Fua3CAN6W

    @CVEShield

    17 Nov 2024

    185 Impressions

    1 Retweet

    1 Like

    0 Bookmarks

    0 Replies

    0 Quotes

  5. Issue page for CVE-2024-7965 is now open. I'm pretty damn interested in how they did they heap grooming to get controlled data at such a far away offset? And then how did they know which address to use to jump to ??? https://t.co/QjWwtbNp7b

    @mistymntncop

    16 Nov 2024

    3829 Impressions

    5 Retweets

    31 Likes

    23 Bookmarks

    3 Replies

    0 Quotes

  6. #Vulnerability #android PoC Exploit Released for CVE-2024-7965 Zero-Day Chrome Vulnerability https://t.co/tgBhEAL3Tt

    @Komodosec

    26 Oct 2024

    78 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

Configurations