VulnSocial

CVE-2024-7965Patch(google / chrome)

MEDIUMCVSS 8.8 · HIGHCISA KEV

Exploitation ongoing with high activity in latest observed window (1 mentions)

Immediate actions

  • Patch google chrome systems immediately
  • Assume compromise if assets are exposed

Recommended action window: Immediate (within 24h)

NVD description

Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

google CVEsBack to dashboard
4.5/ 10 priority

Sources & remediation

Listed in the CISA Known Exploited Vulnerabilities catalog. Federal remediation due date: 2024-09-18. Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Other references
Weakness type (CWE)
CWE-787CWE-358

Priority

MEDIUM

Exploitation

ACTIVE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • chrome
  • edge_chromium

Threat summary

  • Active exploitation appears in 1 classified signals
  • Patch or workaround signal is available
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Active exploitation reported across 1 signal
  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 1 signal
  • Peaked 1d ago at 1 mentions (2026-09-06); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
googlemicrosoft
Products
chromeedge_chromium

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-09-06: 1Mentions · 2026-09-07: 1Active Exploitation · 2026-09-06: 1Patch / Workaround · 2026-09-06: 1Patch / Workaround · 2026-09-07: 1Technical Details · 2026-09-07: 109-0609-07
Signal classification1 categories
Patch
2100.0%
Full discourse2 posts
  • ネスぺ社長（CCNA・CCNP攻略）@nespe_shacho
    Patch

    【ITニュース】Googleが9/5、ChromeとChromeOSに重大な脆弱性(CVE-2024-7965)の修正を含む緊急アップデートを公開。V8 JavaScriptエンジンの不適切な実装により、細工されたHTMLでヒープ破損・任意コード実行の恐れ。メモリ破損バグは攻撃者にブラウザの制御を奪われる恐れがあるため、アップデート管理は最優先事項。(出典: Google/各報道)

    Post summary

    Google released an emergency patch for CVE-2024-7965 that fixes a heap corruption vulnerability in the V8 engine, which could have allowed attackers to achieve arbitrary code execution through crafted HTML in Chrome and ChromeOS.

    00000160
    186 followersView on X
  • ネスぺ社長（CCNA・CCNP攻略）@nespe_shacho
    Patch

    【ITニュース】GoogleがChromeの新バージョン128.0.6613.84を9月5日に緊急リリース。重大度「High」のゼロデイ脆弱性(CVE-2024-7965)を修正しました。既に悪用が確認されており、早急なアップデートが推奨されています。(出典: セキュリティ各社) https://t.co/v0auZmQcfG

    Post summary

    Google urgently patched Chrome 128.0.6613.84 for CVE‑2024‑7965, a high‑severity zero‑day already being exploited, and urges immediate update.

    0000056
    186 followersView on X
CPE platform detail2 entries

2 of 2 entries

PartVendorProductVersionTarget SWTarget HW
Appgooglechrome---
Appmicrosoftedge_chromium---

Explore more

Back to dashboardgoogle CVEsmicrosoft CVEschrome vulnerabilities