CVE-2024-0517

✓ Confirmed 0-Day

Triaged: March 5, 2026 1 article

VulnLookup ↗ NVD ↗ MITRE ↗

EPSS Score

Source: FIRST.org · 2026-05-24

75.48%

probability

This CVE has a 75.48% probability of being exploited in the next 30 days.

0% Top 98.9th percentile of all CVEs 100%

CVSS score unavailable

Neither CIRCL nor NVD returned a CVSS score for this CVE. View on VulnerabilityLookup ↗

Attack Intelligence

CWE-118 · Incorrect Access of Indexable Resource ('Range Error') CWE-119 · Buffer Overflow CWE-664 · Improper Control of a Resource Through its Lifetime CWE-787 · Out-of-bounds Write

Google fixes first actively exploited Chrome zero-day of 2024

BleepingComputer Jan 16, 2024

Signal Intelligence

Confidenceⓘ

92%

EPSS 75.48%

Mentions 1

Last Seen Jan 16, 2024

CNA Information

Analyst Note

CVE-2024-0517 is explicitly named as the first actively exploited Chrome zero-day of 2024 in the BleepingComputer article. The timing is tight: CVE published 2024-01-16, patch version 120.0.6099.224 released shortly after, with active exploitation documented before patch availability. This meets all zero-day criteria.

Triage Info

Decided atMar 05, 2026