CVE-2024-5274

Type Confusion in V8 in Google Chrome prior to 125.0.6422.112 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

Affected

Google · Chrome

CVSS v3.1 NVD

9.6 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

CVSS v3.1 CNA

8.3 HIGHCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

EPSS

7.47% chance of exploitation in the next 30 days, 94th percentile

CISA KEV

added 2024-05-28

Published

2024-05-28

Updated

2025-10-21

Proof-of-concept exploits (5)

• https://issues.chromium.org/issues/341663589
• DarkNavySecurity/PoC226★ · 2025-08-27
• mistymntncop/CVE-2024-527486★ · 2024-08-30
• sdm313/Cyber-security-Projects1★ · 2024-07-25
• jamezx32/CVE-2024-5274

Security advisories

• https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_23.html

References

• CVE Record
• NVD entry

Related

• CVE-2025-43300
• CVE-2025-6554
• CVE-2022-1802
• CVE-2022-26485
• CVE-2022-4262
• CVE-2023-2033