Actively exploited in the wild
Google Chromium V8 Type Confusion Vulnerability
Google - Chromium V8 · Listed in the CISA KEV since 2024-08-26. This indicates confirmed attacks in production environments.
Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CVE-2024-7971
CriticalCVSS 9.6KEVSummary
Type confusion in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to exploit heap corruption via a crafted HTML page.
Risk Assessment
An attacker could exploit the vulnerability to execute arbitrary code in the browser context, potentially leading to user system compromise.
Recommendation
Update Google Chrome to version 128.0.6613.84 or later.
Other vulnerabilities in Google Chrome
See all- CVE-2026-113343High
Memory corruption vulnerability in the Sandbox component of Google Chrome prior to 156.0.8078.47. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page.
- CVE-2026-113339High
Use-after-free vulnerability in the SVG component of Google Chrome prior to 156.0.8078.47. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page.
- CVE-2026-113338High
Use-after-free vulnerability in the Turbolev component of Google Chrome prior to 156.0.8078.47. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page.
- CVE-2026-113337High
Memory corruption vulnerability in the Scroll component of Google Chrome prior to 156.0.8078.47. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page.
- CVE-2026-113335High
Memory corruption vulnerability in the Extensions component of Google Chrome prior to 156.0.8078.47. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page.
- CVE-2026-113332High
Memory corruption vulnerability in the GPU component of Google Chrome prior to 156.0.8078.47. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page.
- CVE-2026-113327High
Use-after-free vulnerability in the Chromecast component of Google Chrome prior to 156.0.8078.47. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page.
- CVE-2026-113324High
Use-after-free vulnerability in the GPU component of Google Chrome prior to 156.0.8078.47. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page.
- CVE-2026-113322Unknown
Memory corruption in the Dawn component of Google Chrome prior to version 156.0.8078.47. A remote attacker could potentially read memory inside the sandbox via a crafted HTML page. Chromium severity: High.
- CVE-2026-113321High
Use-after-free vulnerability in the Extensions component of Google Chrome prior to 156.0.8078.47. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page.
Original NVD description (English source)
Type confusion in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Vulnerability data from NVD (NIST) · CISA KEV · EPSS