CVE-2024-7965: Google Chromium V8 Inappropriate Implementation Vulnerability
Chromium: CVE-2024-7965 Inappropriate implementation in V8
Other sources
Google Chromium V8 contains an inappropriate implementation vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
— CISA
Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
— NVD
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 128.0.6613.84 - Upgrade
Upgrade
Google Chromiumto a version that resolves this vulnerability.Fixed in 128.0.6613.84
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2024-7965?
CVE-2024-7965 has been classified with high severity due to potential exploitation in vulnerable software.
How do I fix CVE-2024-7965?
To mitigate CVE-2024-7965, you should update Microsoft Edge or Google Chrome to the latest version.
Which versions of Microsoft Edge are affected by CVE-2024-7965?
CVE-2024-7965 affects Microsoft Edge versions up to 128.0.2739.42.
Is CVE-2024-7965 specific to Google Chrome?
CVE-2024-7965 originated from Chromium and affects both Google Chrome and Microsoft Edge (Chromium-based).
What products are impacted by CVE-2024-7965?
CVE-2024-7965 impacts Microsoft Edge (Chromium-based) and Google Chrome with specific version limitations.