cbcvebase.
CVE-2024-7965
published 2024-08-21

CVE-2024-7965: Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML…

PriorityP186high8.8CVSS 3.1
AVNACLPRNUIRSUCHIHAH
KEVITWEXPLOIT
CISA Known Exploited Vulnerabilitydue 2024-09-18
Exploited in the wild
EPSS
17.23%
96.8th percentile
Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Affected

10 ranges
VendorProductVersion rangeFixed in
chromiumchromium>= 0 < 128.0.6613.84-1~deb12u1128.0.6613.84-1~deb12u1
chromiumchromium>= 0 < 128.0.6613.84-1128.0.6613.84-1
chromiumchromium>= 0 < 128.0.6613.84-1128.0.6613.84-1
debianchromium< chromium 128.0.6613.84-1~deb12u1 (bookworm)chromium 128.0.6613.84-1~deb12u1 (bookworm)
googlechrome< 128.0.6613.84128.0.6613.84
googlechrome>= 128.0.6613.84 < 128.0.6613.84128.0.6613.84
googlechrome_chrome
microsoftedge_chromium< 128.0.2739.42128.0.2739.42
msrcmicrosoft_edge
paloaltoprisma_browser

Detection & IOCsextracted from sources · hover to see the quote

  • CVE-2024-7965 is confirmed actively exploited in the wild — flag any Chrome/Chromium-based browser version prior to 128.0.6613.84 as vulnerable and unpatched
  • The vulnerability is triggered via a crafted HTML page delivered remotely — monitor for suspicious or anomalous HTML page loads in Chromium-based browsers, particularly those invoking V8 JIT/WebAssembly paths
  • Exploitation can result in arbitrary code execution inside the browser sandbox — look for unusual child processes spawned from Chrome/Edge renderer processes as a post-exploitation indicator
  • Microsoft Edge (Chromium-based) versions prior to 128.0.2739.42 (based on Chromium 128.0.6613.84/.85) are also affected — include Edge in asset inventory checks
  • The vulnerability affects multiple Chromium-based browsers (Chrome, Edge, Opera) — broaden detection scope beyond Chrome alone when hunting for exploitation attempts
  • ·The fix was introduced in Chrome stable channel 128.0.6613.84 — any Chromium build below this version string should be treated as unpatched for CVE-2024-7965
  • ·CISA mandated remediation by 2024-09-18 under the Known Exploited Vulnerabilities catalog — organizations still running pre-128.0.6613.84 Chromium after this date are in violation of BOD 22-01 requirements
  • ·Red Hat does not ship Chromium in supported offerings; Fedora/EPEL users should consider an alternative browser until updated packages are released

CVSS provenance

nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
osv8.8HIGH
vulncheck8.8HIGH
cisa8.8HIGH
vendor_debian8.8HIGH
vendor_msrc8.8HIGH
vendor_redhat8.8HIGH
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.