CVE-2024-1939General(fedoraproject / chrome)

LOWCVSS 8.8 · HIGH

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Prioritize remediation for fedoraproject chrome systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

Type Confusion in V8 in Google Chrome prior to 122.0.6261.94 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

2.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-843

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • chrome
  • fedora

Threat summary

  • Exploit tooling references are present in monitored signal
  • 3 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Exploit tool or code specified in 1 signal
  • General: 2 classified signals
  • Peaked 2d ago at 1 mentions (2026-08-07); latest day: 1
  • 3 total mentions across 3 days

Affected systems

Products
chromefedora

3 versions affected across 2 products

Deep dive

Activity timeline3 mentions / 3d
00111Mentions · 2026-08-07: 1Mentions · 2026-09-11: 1Mentions · 2026-09-22: 1Exploit Tool / Code · 2026-09-22: 108-0709-1109-22
Signal classification2 categories
General
266.7%
Exploit
133.3%
Classification over time
DateTotalLabels
2026-08-071
General1
2026-09-111
General1
2026-09-221
Exploit1
Full discourse3 posts
  • Taha ז@lordx64
    Exploit

    We just ACEd CVE-2024-1939 in ExploitBench - another 16/16 victory - equalizing with Claude Mythos score. I can keep this all day, we will ACE the whole ExploitBench. I will publish the traces for CVE-2024-1939 in a few. https://t.co/hV38kMXbin

    Post summary

    The tweet highlights the successful exploitation of CVE-2024-1939 using the ExploitBench tool, indicating the availability of functional exploit code.

    23037133.7K
    9.4K followersView on X
  • Taha ז@lordx64
    General

    Running cyberkimi on exploitbench since you guys don't get it and are still using claude :-) will share the results of seed 1 once complete. right now cyberkimi is running on v8-r1:cve-2024-1939 exploitation of Google Chrome v8 will share results as I get them - stay tuned ! https://t.co/9lGgEDWgp5

    Post summary

    The author reports running the cyberkimi tool on exploitbench to target CVE‑2024‑1939 in Google Chrome v8, intending to share findings later, but provides no detailed technical information or evidence of active exploitation.

    201881.7K
    9.3K followersView on X
  • Rolezn@Rolezn
    General

    DeepSeek-V4.1-Flash is insane! I benchmarked DeepSeek-V4.1-Flash by @deepseek_ai against Exploitbench's V8 CVE-2024-6100 and V8 CVE-2024-1939. It scored 6/16 and 5/16 only behind GPT5.5 but at a fraction of a cost at only ~1.50$ #DeepSeek #CyberSecurity #BugBounty #LLM https://t.co/3h0sqgXAHW

    Post summary

    The post references CVE-2024-6100 and CVE-2024-1939 only as part of a model benchmark, providing no deeper insight into exploitation or mitigation.

    01003471
    352 followersView on X
CPE platform detail4 entries

4 of 4 entries

PartVendorProductVersionTarget SWTarget HW
OSfedoraprojectfedora38--
OSfedoraprojectfedora39--
OSfedoraprojectfedora40--
Appgooglechrome---

Explore more