Firetruck

CVE-2024-5274

KEV

Google Chromium V8 Type Confusion Vulnerability

View CVE record →
Vendor / Project
Google
Product
Chromium V8
Date added
May 28, 2024
Due date
Jun 18, 2024
Known ransomware use
Unknown
CWEs
CWE-843

Description

Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to execute code via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notes