CVE-2024-2887General(fedoraproject / chrome)

LOWCVSS 7.7 · HIGH

Exploit discussion active in current signal (3 latest mentions)

Immediate actions

Prioritize remediation for fedoraproject chrome systems immediately
Hunt for exploitation attempts and persistence artifacts
Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

Type Confusion in WebAssembly in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)

fedoraproject CVEs Back to dashboard

2.5/ 10 priority

Sources & remediation

Exploit / PoC references

Other references

Weakness type (CWE)

CWE-843

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

chrome
fedora

Threat summary

Exploit tooling references are present in monitored signal
4 mentions across 2 observed days
Momentum state: stable

What's happening

Exploit tool or code specified in 1 signal
General: 3 classified signals
Peaked at 3 mentions on most recent observed day (2026-08-14)
4 total mentions across 2 days

Affected systems

Vendors

fedoraproject google

Products

chromefedora

3 versions affected across 2 products

Deep dive

Activity timeline4 mentions / 2d

Signal classification2 categories

General

375.0%

Exploit

125.0%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-07-01	1	General1
2026-08-14	3	Exploit1General2

Full discourse4 posts

Joseph Perla@jperla112d
General
https://trustedrouter.com/blog/openpatcher-s1-exploitbench-cve-2024-2887
Post summary
The only information provided is a URL reference to a blog post about CVE‑2024‑2887; no further details on exploitation, patches, or technical aspects are stated.
21140565
11.0K followersView on X
Joseph Perla@jperla68d
Exploit
Seven out of sixteen is still ugly. OpenPatcher-S1 scored 7/16 on the public ExploitBench CVE-2024-2887 target. The listed baselines scored 3, 2, and 2. It more than doubled the strongest one. Nine rungs remain unsolved. Reproduce it.
Post summary
The tweet highlights that the exploit tool "OpenPatcher‑S1" achieved a 7/16 score on publicly available ExploitBench for CVE‑2024‑2887, but provides no patch, active exploitation claim, or technical details.
10000280
10.9K followersView on X
Joseph Perla@jperla68d
General
https://trustedrouter.com/blog/openpatcher-s1-exploitbench-cve-2024-2887?utm_source=x&utm_medium=organic_video&utm_campaign=founder_daily_202608&utm_content=20260814_x_video_openpatcher_s1
Post summary
The text provides only a URL without any explicit content, so no concrete indicators are available.
0000045
10.9K followersView on X
Joseph Perla@jperla68d
General
https://trustedrouter.com/blog/openpatcher-s1-exploitbench-cve-2024-2887?utm_source=x&utm_medium=organic_social&utm_campaign=founder_daily_202608&utm_content=20260814_x_text_openpatcher_s1
Post summary
The URL points to a blog post about CVE‑2024‑2887, but the text itself does not explicitly state any of the key indicators for PoC, exploit code, active exploitation, patch, technical details, or debunking.
0000040
10.9K followersView on X

CPE platform detail4 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

4 of 4 entries

Part	Vendor	Product	Version	Target SW	Target HW
OS	fedoraproject	fedora	38	-	-
OS	fedoraproject	fedora	39	-	-
OS	fedoraproject	fedora	40	-	-
App	google	chrome	-	-	-

Explore more

Back to dashboard fedoraproject CVEs google CVEs chrome vulnerabilities

What researchers are saying

CVE-2024-2887

Joseph Perla[verified]@jperlaGeneral

The only information provided is a URL reference to a blog post about CVE‑2024‑2887; no further details on exploitation, patches, or technical aspects are stated.

Joseph Perla[verified]@jperlaExploit

The tweet highlights that the exploit tool "OpenPatcher‑S1" achieved a 7/16 score on publicly available ExploitBench for CVE‑2024‑2887, but provides no patch, active exploitation claim, or technical details.

Joseph Perla[verified]@jperlaGeneral

The text provides only a URL without any explicit content, so no concrete indicators are available.

Joseph Perla[verified]@jperlaGeneral

The URL points to a blog post about CVE‑2024‑2887, but the text itself does not explicitly state any of the key indicators for PoC, exploit code, active exploitation, patch, technical details, or debunking.