Google · Chromium V8
CVE-2024-7965
Google Chromium V8 Inappropriate Implementation Vulnerability
O que é
Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CISA: Google Chromium V8 contains an inappropriate implementation vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
O que fazer
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Prazo para as agências federais dos EUA: 18 de setembro de 2024
Mais falhas exploradas de Google
| Adicionado | Vulnerabilidade | Produto | Gravidade | Chance de ataque |
|---|---|---|---|---|
| 9 de set. de 2026 | Out of Bounds Write | Chromium V8 | Alto 8,8 | 3,5% |
| 4 de set. de 2026 | Type Confusion | Chromium V8 | Alto 8,8 | 1,8% |
| 9 de jun. de 2026 | Out-of-Bounds Read and Write | Chromium V8 | Alto 8,8 | 2,4% |
| 13 de mar. de 2026 | Improper Restriction of Operations Within the Bounds of a Memory Buffer | Chromium V8 | Alto 8,8 | 2,7% |
| 19 de nov. de 2025 | Type Confusion | Chromium V8 | Alto 8,8 | 4,9% |
| 23 de set. de 2025 | Type Confusion | Chromium V8 | Alto 8,8 | 9,0% |
| 2 de jul. de 2025 | Type Confusion | Chromium V8 | Alto 8,1 | 14% |
| 5 de jun. de 2025 | Out-of-Bounds Read and Write | Chromium V8 | Alto 8,8 | 7,8% |
Fontes: Known Exploited Vulnerabilities (CISA, domínio público), CVE records (cve.org) e EPSS (FIRST). A chance de ataque é a estimativa EPSS de que alguém tente explorar a falha nos próximos 30 dias.