CVE-2024-4947

CVE Published 2024-05-15
Related CWE(s) CWE-843: Access of Resource Using Incompatible Type ('Type Confusion')
Related Vendor(s) google
Related Product(s) chrome
Exploitation Reported (CISA KEV) 2024-05-20
CVSS 3 Base Score 9.6 (CRITICAL)
CVSS 3 Attack Complexity LOW
CVSS 3 Attack Vector NETWORK

Type Confusion in V8 in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

Cyber Threat Graph Context

Explore how this CVE relates to the wider threat graph

References