Google Chromium V8 Memory Corruption Vulnerability

HIGH 8.8EXPLOITED (CISA KEV)CVE-2021-38003 · Published 23/11/2021 · updated 17/06/2026

Google Chromium V8 Memory Corruption Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 03/11/2021. Patch affected systems as an emergency.

Package	Affected versions	Patched versions
chrome google	`< 95.0.4638.69`	`95.0.4638.69`

Description

Inappropriate implementation in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

References

chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_28.html · Release Notes
crbug.com/1263462 · Exploit
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3W46HRT2UVHWSLZB6JZHQF6JNQWKV744 · Release Notes
debian.org/security/2022/dsa-5046 · Mailing List
cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
CISA KEV · CVE-2021-38003

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free