PoC Index

CVE-2024-4947

KEVCRITICAL 9.6EPSS 15.2%

Type Confusion in V8 in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVSS v3.1
9.6 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
CVSS v3.1
9.6 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
EPSS
15.24% chance of exploitation in the next 30 days, 97th percentile
CISA KEV
added 2024-05-20
Published
2024-05-15
Updated
2025-12-16

Proof-of-concept exploits (2)

References

Related