CVE-2024-7971
Exploited in the Wild
✓ Confirmed 0-Day
★ Google Project Zero
Triaged: March 3, 2026
6 articles
EPSS Score
Source: FIRST.org · 2026-05-24
1.02%
probability
This CVE has a 1.02% probability
of being exploited in the next 30 days.
0%
Top 77.4th percentile of all CVEs
100%
CVSS score unavailable
Neither CIRCL nor NVD returned a CVSS score for this CVE.
View on VulnerabilityLookup ↗
Description
Project ZeroType confusion in V8
Attack Intelligence
Google Project Zero
Patched
Aug. 21, 2024
Reported by
Microsoft Threat Intelligence Center (MSTIC), Microsoft Security Response Center (MSRC)
Exploits & PoC
mistymntncop/CVE-2024-7971
PoC CVE-2024-7971 — mistymntncop/CVE-2024-7971
34
1 repo — triés par ⭐
Rechercher sur GitHub ↗
Google fixes ninth Chrome zero-day tagged as exploited this year
BleepingComputer
Aug 21, 2024
Google tags a tenth Chrome zero-day as exploited this year
BleepingComputer
Aug 26, 2024
Security Advisory 2024-088
CERT-EU
Aug 27, 2024
North Korean hackers exploit Chrome zero-day to deploy rootkit
BleepingComputer
Aug 30, 2024
Signal Intelligence
Confidence
92%
EPSS
1.02%
Mentions
6
Last Seen
Aug 30, 2024
CNA Information
Analyst Note
CVE-2024-7971 is confirmed as an actively exploited zero-day in Chrome with strong evidence including Google Project Zero attribution, HIGH CVSS severity (8.8), documented exploitation by North Korean threat actors deploying rootkits, and multiple authoritative sources (BleepingComputer, CERT-EU) corroborating active in-the-wild attacks. The vulnerability involves type confusion leading to heap corruption, a critical memory safety issue with proven exploitability.
Threat Actors 2
Lazarus Group
apt_group
Information theft and espionage
🇰🇵 KP
UNC4736
apt_group
🇰🇵 KP
Triage Info
Decided atMar 03, 2026