CVE-2024-7965
ENISA EUVD: EUVD-2024-48798 ↗
Exploited in the Wild
✓ Confirmed 0-Day
★ Google Project Zero
Triaged: March 3, 2026
3 articles
EPSS Score
Source: FIRST.org · 2026-05-24
24.23%
probability
This CVE has a 24.23% probability
of being exploited in the next 30 days.
0%
Top 96.2th percentile of all CVEs
100%
CVSS v3.1
Source: NVD8.8
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Description
Project ZeroInappropriate implementation in V8
Affected Products
Attack Intelligence
CWE-118
· Incorrect Access of Indexable Resource ('Range Error')
CWE-119
· Buffer Overflow
CWE-358
· Improperly Implemented Security Check for Standard
CWE-573
CWE-664
· Improper Control of a Resource Through its Lifetime
CWE-693
· Protection Mechanism Failure
CWE-710
· Improper Adherence to Coding Standards
CWE-787
· Out-of-bounds Write
Google Project Zero
Patched
Aug. 21, 2024
Reported by
TheDog
Exploits & PoC
bi-zone/CVE-2024-7965
This repository contains PoC for CVE-2024-7965. This is the vulnerability in the V8 that occurs only within ARM64.
49
XueDugu/cve-2024-7965-poc
CVE-2024-7965是Google Chrome浏览器中V8 JavaScript引擎的一个高危漏洞。该漏洞源于V8引擎在处理特定JavaScript代码时实现不当，导致堆内存损坏。攻击者可通过诱导用户访问包含特制JavaScript的恶意网页，利用此漏洞在Chrome渲染器中执行任意代码。
1
2 repos — triés par ⭐
Rechercher sur GitHub ↗
Google tags a tenth Chrome zero-day as exploited this year
BleepingComputer
Aug 26, 2024
Security Advisory 2024-088
CERT-EU
Aug 27, 2024
Signal Intelligence
Confidence
92%
EPSS
24.23%
CVSS v3.1
8.8
Mentions
3
Last Seen
Aug 27, 2024
CNA Information
Analyst Note
CVE-2024-7965 is confirmed as a zero-day vulnerability exploited in the wild, with Google's official acknowledgment and inclusion in Project Zero research. The HIGH CVSS score (8.8) reflects significant heap corruption risk in V8, and multiple credible sources including BleepingComputer and CERT-EU corroborate active exploitation.
Triage Info
Decided atMar 03, 2026