EPSS Score
Source: FIRST.org · 2026-05-24
5.68%
probability
This CVE has a 5.68% probability
of being exploited in the next 30 days.
0%
Top 90.5th percentile of all CVEs
100%
CVSS v3.1
Source: NVD8.8
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected Products
Attack Intelligence
Google fixes ninth Chrome zero-day tagged as exploited this year
BleepingComputer
Aug 21, 2024
Google tags a tenth Chrome zero-day as exploited this year
BleepingComputer
Aug 26, 2024
Google fixes eighth actively exploited Chrome zero-day this year
BleepingComputer
May 24, 2024
Google fixes third actively exploited Chrome zero-day in a week
BleepingComputer
May 15, 2024
Google fixes fifth Chrome zero-day exploited in attacks this year
BleepingComputer
May 10, 2024
Google Chrome emergency update fixes 6th zero-day exploited in 2024
BleepingComputer
May 14, 2024
Google fixes one more Chrome zero-day exploited at Pwn2Own
BleepingComputer
Apr 03, 2024
Security Advisory 2024-044
CERT-EU
May 16, 2024
Signal Intelligence
Confidence
85%
EPSS
5.68%
CVSS v3.1
8.8
Mentions
14
Last Seen
Aug 26, 2024
CNA Information
Analyst Note
CVE-2024-3159 is explicitly named as a zero-day in multiple authoritative sources (BleepingComputer articles referring to 'ninth Chrome zero-day tagged as exploited this year'). The CVE was published April 6, 2024, and patched in Chrome 123.0.6312.105, with contemporaneous reporting of active exploitation. This matches the zero-day profile: in-the-wild exploitation concurrent with patch availability.
Triage Info
Decided atMar 05, 2026