Google Chromium V8 Type Confusion Vulnerability

CRITICAL 9.6EXPLOITED (CISA KEV)CVE-2024-7971 · Published 21/08/2024 · updated 17/06/2026

Google Chromium V8 Type Confusion Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 26/08/2024. Patch affected systems as an emergency.

Package	Affected versions	Patched versions
chrome google	`< 128.0.6613.84`	`128.0.6613.84`
edge microsoft	`< 128.0.2739.42`	`128.0.2739.42`

Description

Type confusion in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

References

chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop_21.html · Release Notes
issues.chromium.org/issues/360700873 · Permissions Required
microsoft.com/en-us/security/blog/2024/08/30/north-korean-threat-actor-citrine-sleet-exploiting-chromium-zero-day · Exploit
cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
CISA KEV · CVE-2024-7971

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free